CVE-2026-3342

Summary

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface.

This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1.

Affected Software

VendorProductVersion RangeStatus
WatchGuardFireware OS11.9 <= 11.12.4+541730affected
WatchGuardFireware OS12.0 <= 12.11.7affected
WatchGuardFireware OS12.5 <= 12.5.16affected
WatchGuardFireware OS2025.1 <= 2026.1.1affected

Weaknesses

  • CWE-787: CWE-787 Out-of-bounds Write

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References