CVE-2026-3344
Medium · 4.9CVSS
4.9
EPSS
0.5%
Published
Mar 3, 2026
CISA due date
—
The record
A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.This issue affects Fireware OS 12.0 up to and including 12.11.7, 12.5.9 up to and including 12.5.16, and 2025.1 up to and including 2026.1.1.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-97687 urllib3 is an HTTP client library for Python. CWE-440
- CVE-2026-35191 Issue summary: The OpenSSL QUIC server, when configured to not preform address… CWE-440
- CVE-2026-16769 An unencrypted 'pause encryption request' message causes a denial of service in the in… CWE-440
- CVE-2026-65934 An unencrypted 'pause encryption request' message causes a denial of service in the BT122… CWE-440
- CVE-2026-65932 The BT122 module stops advertising after receiving a plaintext 'pause enceryption… CWE-440
- CVE-2026-8806 Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series… CWE-440
- CVE-2026-42752 Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions. CWE-440
- CVE-2026-49316 Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout… CWE-440