CVE-2026-4315 in WatchGuard Fireware OS
Summary
A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware Web UI by convincing an authenticated administrator into visiting a malicious web page.This issue affects Fireware OS: 11.8 through 11.12.4+541730, 12.0 through 12.11.8, and 2025.1 through 2026.1.2.
Responsible
WatchGuard
Reservation
03/17/2026
Disclosure
03/30/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 354179 | WatchGuard Fireware OS WebUI cross-site request forgery | 352 | Not defined | Not defined | CVE-2026-4315 |