PT-2026-22732 · Watchguard · Watchguard Fireware

Btaol · Published 2026-03-03 · Updated 2026-03-19 · CVE-2026-3342

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 11.9 through 11.12.4 Update1 WatchGuard Fireware OS versions 12.0 through 12.11.7 WatchGuard Fireware OS versions 2025.1 through 2026.1.1

Description An Out-of-bounds Write vulnerability exists in WatchGuard Fireware OS that may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface.

Recommendations Update to a version later than 11.12.4 Update1. Update to a version later than 12.11.7. Update to a version later than 2026.1.1.

Fix

RCE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-3342

Affected Products

Watchguard Fireware

References · 12

• https://watchguard.com/wgrd-psirt/advisory/wgsa-2026-00003 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3342 · Security Note
• https://osv.dev/vulnerability/CVE-2026-3342 · Vendor Advisory
• https://twitter.com/CVEnew/status/2028834666862502012 · Twitter Post
• https://t.me/CVEtracker/46200 · Telegram Post
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2026-0003 · Note
• https://twitter.com/infoflowcloud/status/2028835373288145182 · Twitter Post
• https://twitter.com/vuln_tracker/status/2034080893862875440 · Twitter Post
• https://t.me/cveNotify/153928 · Telegram Post
• https://t.me/cveNotify/154191 · Telegram Post
• https://twitter.com/praetorianlabs/status/2033970875838394453 · Twitter Post
• https://twitter.com/praetorianlabs/status/2034511706416656406 · Twitter Post