PT-2026-22732 · Watchguard · Watchguard Fireware

Btaol · Publicado 2026-03-03 · Atualizado 2026-03-19 · CVE-2026-3342

Positive Technologies (AI Summary)

CVSS v4.0

8.6

Alta

Vetor base

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 11.9 through 11.12.4 Update1 WatchGuard Fireware OS versions 12.0 through 12.11.7 WatchGuard Fireware OS versions 2025.1 through 2026.1.1

Description An Out-of-bounds Write vulnerability exists in WatchGuard Fireware OS that may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface.

Recommendations Update to a version later than 11.12.4 Update1. Update to a version later than 12.11.7. Update to a version later than 2026.1.1.

Correção

RCE

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2026-3342

Produtos afetados

Watchguard Fireware

Referências · 12

• https://twitter.com/CVEnew/status/2028834666862502012 · Publicação no Twitter
• https://t.me/CVEtracker/46200 · Publicação no Telegram
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2026-0003 · Nota
• https://twitter.com/infoflowcloud/status/2028835373288145182 · Publicação no Twitter
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2026-00003 · Aviso do Fabricante
• https://twitter.com/vuln_tracker/status/2034080893862875440 · Publicação no Twitter
• https://t.me/cveNotify/153928 · Publicação no Telegram
• https://t.me/cveNotify/154191 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-3342 · Nota de Segurança
• https://twitter.com/praetorianlabs/status/2033970875838394453 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-3342 · Aviso do Fabricante
• https://twitter.com/praetorianlabs/status/2034511706416656406 · Publicação no Twitter