CVE-2026-4315

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 11.8 through 11.12.4+541730 WatchGuard Fireware OS versions 12.0 through 12.11.8 WatchGuard Fireware OS versions 2025.1 through 2026.1.2

Description A Cross-Site Request Forgery (CSRF) issue in the Fireware OS WebUI allows a remote attacker to cause a denial-of-service (DoS) condition. This occurs when an authenticated administrator is tricked into visiting a malicious web page, which then triggers the condition in the WebUI. CSRF is a technique where an attacker forces a user's browser to perform an unwanted action on a different website where the user is currently authenticated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.