CVE-2026-3344: WatchGuard Firebox System Integrity Check Bypass
A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.This issue affects Fireware OS 12.0 up to and including 12.11.7, 12.5.9 up to and including 12.5.16, and 2025.1 up to and including 2026.1.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3344?
CVE-2026-3344 has been classified as a medium severity vulnerability.
How do I fix CVE-2026-3344?
To fix CVE-2026-3344, ensure that you upgrade WatchGuard Fireware OS to a version later than 12.11.7, 12.5.16, or 2026.1.1.
What systems are affected by CVE-2026-3344?
CVE-2026-3344 affects WatchGuard Fireware OS versions from 12.0 up to 12.11.7, as well as specific versions within the 12.5 and 2025.x series.
What type of attack does CVE-2026-3344 enable?
CVE-2026-3344 allows an attacker to bypass the filesystem integrity check and maintain limited persistence through a malicious firmware update.
Who reported CVE-2026-3344?
CVE-2026-3344 was reported by WatchGuard's internal security team through their PSIRT process.