PT-2026-22733 · Watchguard · Fireware Os

Btaol · Published 2026-03-03 · Updated 2026-03-04 · CVE-2026-3343

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Fireware OS versions 12.7 through 12.11.7 Fireware OS versions 2025.1 through 2026.1.1

Description A reflected cross-site scripting (XSS) issue exists in the Fireware OS Web UI. This allows for the execution of malicious JavaScript within the browser of an authenticated management user when they click a specially crafted link. The issue enables code execution in the user's context.

Recommendations Fireware OS versions 12.7 through 12.11.7 should be updated. Fireware OS versions 2025.1 through 2026.1.1 should be updated.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-3343

Affected Products

Fireware Os

References · 10

• https://osv.dev/vulnerability/CVE-2026-3343 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3343 · Security Note
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2026-00004 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2028842300172800374 · Twitter Post
• https://twitter.com/infoflowcloud/status/2028835356104106308 · Twitter Post
• https://t.me/CVEtracker/46201 · Telegram Post
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2026-0004 · Note
• https://twitter.com/CVEnew/status/2028834665893630103 · Twitter Post
• https://t.me/cveNotify/154192 · Telegram Post
• https://t.me/cveNotify/153929 · Telegram Post