VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 3, 2026· Updated Mar 4, 2026

WatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UI

CVE-2026-3343

Description

A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management user's browser when they click on a specially crafted link.

This vulnerability affects Fireware OS 12.7 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1.

Affected products

2
  • WatchGuard/Firewarellm-fuzzy
    Range: 12.7 - 12.11.7, 2025.1 - 2026.1.1
  • WatchGuard/Fireware OSv5
    Range: 12.7

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.