CVE-2026-3344CWE-440

CVE-2026-3344

Medium · published March 3, 2026

CVSS v3.1
4.9
EPSS
0%
Percentile
39.2
In the wild
Unconfirmed
What it is

A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00464 · 39.2th percentile
Weakness
CWE-440 · Expected Behavior Violation
Published
2026-03-03T19:15Z
Affected products (3)
ProductVersionsFixed in
watchguard/fireware≥ 12.0, < 12.11.812.11.8
watchguard/fireware≥ 12.5.9, < 12.5.1712.5.17
watchguard/fireware≥ 2025.1, < 2026.1.22026.1.2
References (2)
https://psirt.watchguard.com/CVE-2026-3344 · 5d1c2695-1a31-4499-88ae-e847036fd7e3https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00005 · 5d1c2695-1a31-4499-88ae-e847036fd7e3
EPSS history
Timeline
  • 03 MAR 13:17Z
    WatchGuard Firebox System Integrity Check Bypass
    cvelistv5