PT-2026-22733 · Watchguard · Fireware Os

Btaol · Publicado 2026-03-03 · Atualizado 2026-03-04 · CVE-2026-3343

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Fireware OS versions 12.7 through 12.11.7 Fireware OS versions 2025.1 through 2026.1.1

Description A reflected cross-site scripting (XSS) issue exists in the Fireware OS Web UI. This allows for the execution of malicious JavaScript within the browser of an authenticated management user when they click a specially crafted link. The issue enables code execution in the user's context.

Recommendations Fireware OS versions 12.7 through 12.11.7 should be updated. Fireware OS versions 2025.1 through 2026.1.1 should be updated.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-3343

Produtos afetados

Fireware Os

Referências · 10

• https://twitter.com/VulmonFeeds/status/2028842300172800374 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2028835356104106308 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-3343 · Aviso do Fabricante
• https://t.me/CVEtracker/46201 · Publicação no Telegram
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2026-0004 · Nota
• https://twitter.com/CVEnew/status/2028834665893630103 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-3343 · Nota de Segurança
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2026-00004 · Aviso do Fabricante
• https://t.me/cveNotify/154192 · Publicação no Telegram
• https://t.me/cveNotify/153929 · Publicação no Telegram