PT-2026-29637 · Watchguard · Firebox+1

Btaol · Published 2026-04-01 · Updated 2026-04-02 · CVE-2026-3987

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions WatchGuard Firebox systems with Fireware OS versions 12.6.1 through 12.11.8 and 2025.1 through 2026.1.2

Description A path traversal vulnerability exists in the Fireware OS Web UI. A privileged, authenticated remote attacker may be able to execute arbitrary code with elevated system process privileges.

Recommendations Update Fireware OS to a version later than 12.11.8. Update Fireware OS to a version later than 2026.1.2.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-3987

Affected Products

Firebox

Fireware Os

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-3987 · Security Note
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2026-00009 · Note
• https://twitter.com/CVEnew/status/2039647740997833048 · Twitter Post