CVE-2026-4315

WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI

Published Mar 30, 2026 CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Description

A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware Web UI by convincing an authenticated administrator into visiting a malicious web page.

Analysis

Technical impact

A Cross‑Site Request Forgery flaw, identified as CWE-352, exists in the Fireware OS WebUI. A remote attacker can get an authenticated administrator to load a crafted malicious page, which can cause the WebUI to crash or become unavailable, effectively denying administrative access. The vulnerability does not grant code execution or system compromise; its impact is limited to service disruption.

Affected Systems

All WatchGuard Fireware OS appliances that run the Fireware OS WebUI and have not been updated to the fixed releases—Fireware OS 2026.2, 12.12, or 12.5.18—are potentially affected. Any Firebox device provisioned with these firmware versions is at risk.

Risk and Exploitability

The CVSS base score of 7.1 classifies the vulnerability as moderate to high. The EPSS score of 0.00223 indicates a very low expected exploitation probability. The flaw is not included in the CISA KEV catalog, suggesting no known large‑scale exploitation. Exploitation requires an attacker to entice an authenticated administrator to visit a malicious URL; no privilege escalation or remote code execution is needed, but the resulting denial can impair administrative operations.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

WatchGuard

Fireware OS

unaffected

Version	Status	Constraints
`2025.1`	affected	< 2026.2
`12.0`	affected	< 12.12
`11.8`	affected	≤ 11.12.4+541730

WatchGuard

Fireware OS

unaffected

Version	Status	Constraints
`12.0`	affected	< 12.11.9

WatchGuard

Fireware OS

unaffected

Version	Status	Constraints
`12.0`	affected	< 12.5.18

Configuration 1 [-]

AND

cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:watchguard:firebox_m295:-:::::::*
	cpe:2.3:h:watchguard:firebox_m395:-:::::::*
	cpe:2.3:h:watchguard:firebox_m495:-:::::::*
	cpe:2.3:h:watchguard:firebox_m595:-:::::::*
	cpe:2.3:h:watchguard:firebox_m695:-:::::::*
	cpe:2.3:h:watchguard:firebox_t115-w:-:::::::*
	cpe:2.3:h:watchguard:firebox_t125:-:::::::*
	cpe:2.3:h:watchguard:firebox_t125-w:-:::::::*
	cpe:2.3:h:watchguard:firebox_t145:-:::::::*
	cpe:2.3:h:watchguard:firebox_t145-w:-:::::::*
	cpe:2.3:h:watchguard:firebox_t185:-:::::::*

Configuration 2 [-]

AND

cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:watchguard:firebox_t15:-:::::::*
	cpe:2.3:h:watchguard:firebox_t35:-:::::::*

Configuration 3 [-]

OR	cpe:2.3:o:watchguard:fireware::::::::
	cpe:2.3:o:watchguard:fireware:11.12.4:-::::::
	cpe:2.3:o:watchguard:fireware:11.12.4:u1::::::

Configuration 4 [-]

AND

cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*

OR	cpe:2.3:a:watchguard:firebox_cloud:-:::::::*
	cpe:2.3:h:watchguard:firebox_m270:-:::::::*
	cpe:2.3:h:watchguard:firebox_m290:-:::::::*
	cpe:2.3:h:watchguard:firebox_m370:-:::::::*
	cpe:2.3:h:watchguard:firebox_m390:-:::::::*
	cpe:2.3:h:watchguard:firebox_m440:-:::::::*
	cpe:2.3:h:watchguard:firebox_m4600:-:::::::*
	cpe:2.3:h:watchguard:firebox_m470:-:::::::*
	cpe:2.3:h:watchguard:firebox_m4800:-:::::::*
	cpe:2.3:h:watchguard:firebox_m5600:-:::::::*
	cpe:2.3:h:watchguard:firebox_m570:-:::::::*
	cpe:2.3:h:watchguard:firebox_m5800:-:::::::*
	cpe:2.3:h:watchguard:firebox_m590:-:::::::*
	cpe:2.3:h:watchguard:firebox_m670:-:::::::*
	cpe:2.3:h:watchguard:firebox_m690:-:::::::*
	cpe:2.3:h:watchguard:firebox_nv5:-:::::::*
	cpe:2.3:h:watchguard:firebox_t20:-:::::::*
	cpe:2.3:h:watchguard:firebox_t25:-:::::::*
	cpe:2.3:h:watchguard:firebox_t40:-:::::::*
	cpe:2.3:h:watchguard:firebox_t45:-:::::::*
	cpe:2.3:h:watchguard:firebox_t55:-:::::::*
	cpe:2.3:h:watchguard:firebox_t70:-:::::::*
	cpe:2.3:h:watchguard:firebox_t80:-:::::::*
	cpe:2.3:h:watchguard:firebox_t85:-:::::::*
	cpe:2.3:h:watchguard:fireboxv:-:::::::*

No data.

Vendor Product Versions

Watchguard

Fireware Os

Version	Status	Scheme	Platform
`[11.8,11.12.4+541730]`	affected	semver	—
`[12.0,12.11.8]`	affected	semver	—
`[12.5,12.5.17]`	affected	semver	—
`[2025.1,2026.1.2]`	affected	semver	—

Remediation

Vendor Solution

Fireware OS 2026.2, Fireware OS 12.12, Fireware OS 12.5.18, Fireware OS 12.11.9

OpenCVE Recommended Actions

Upgrade the device firmware to Fireware OS 2026.2, 12.12, or 12.5.18 to apply the vendor patch addressing CVE‑2026‑4315.
If a suitable patch is not yet available, restrict the WebUI to trusted networks or isolate the appliance from untrusted networks until remediation.
Enforce strict role‑based access controls and monitor administrator web traffic for suspicious activity.
Educate administrators on phishing and CSRF threats to reduce the likelihood of clicking malicious links.

Generated by OpenCVE AI on August 10, 2026 at 23:50 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction Passive

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.168% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://psirt.watchguard.com/CVE-2026-4315
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00006

History

Aug 14, 2026 1:45 PM First appearance in the feed. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Watchguard firebox Cloud Watchguard firebox M270 Watchguard firebox M290 Watchguard firebox M295 Watchguard firebox M370 Watchguard firebox M390 Watchguard firebox M395 Watchguard firebox M440 Watchguard firebox M4600 Watchguard firebox M470 Watchguard firebox M4800 Watchguard firebox M495 Watchguard firebox M5600 Watchguard firebox M570 Watchguard firebox M5800 Watchguard firebox M590 Watchguard firebox M595 Watchguard firebox M670 Watchguard firebox M690 Watchguard firebox M695 Watchguard firebox Nv5 Watchguard firebox T115-w Watchguard firebox T125 Watchguard firebox T125-w Watchguard firebox T145 Watchguard firebox T145-w Watchguard firebox T15 Watchguard firebox T185 Watchguard firebox T20 Watchguard firebox T25 Watchguard firebox T35 Watchguard firebox T40 Watchguard firebox T45 Watchguard firebox T55 Watchguard firebox T70 Watchguard firebox T80 Watchguard firebox T85 Watchguard fireboxv Watchguard fireware
CPEs		cpe:2.3:a:watchguard:firebox_cloud:-:::::::* cpe:2.3:h:watchguard:firebox_m270:-:::::::* cpe:2.3:h:watchguard:firebox_m290:-:::::::* cpe:2.3:h:watchguard:firebox_m295:-:::::::* cpe:2.3:h:watchguard:firebox_m370:-:::::::* cpe:2.3:h:watchguard:firebox_m390:-:::::::* cpe:2.3:h:watchguard:firebox_m395:-:::::::* cpe:2.3:h:watchguard:firebox_m440:-:::::::* cpe:2.3:h:watchguard:firebox_m4600:-:::::::* cpe:2.3:h:watchguard:firebox_m470:-:::::::* cpe:2.3:h:watchguard:firebox_m4800:-:::::::* cpe:2.3:h:watchguard:firebox_m495:-:::::::* cpe:2.3:h:watchguard:firebox_m5600:-:::::::* cpe:2.3:h:watchguard:firebox_m570:-:::::::* cpe:2.3:h:watchguard:firebox_m5800:-:::::::* cpe:2.3:h:watchguard:firebox_m590:-:::::::* cpe:2.3:h:watchguard:firebox_m595:-:::::::* cpe:2.3:h:watchguard:firebox_m670:-:::::::* cpe:2.3:h:watchguard:firebox_m690:-:::::::* cpe:2.3:h:watchguard:firebox_m695:-:::::::* cpe:2.3:h:watchguard:firebox_nv5:-:::::::* cpe:2.3:h:watchguard:firebox_t115-w:-:::::::* cpe:2.3:h:watchguard:firebox_t125-w:-:::::::* cpe:2.3:h:watchguard:firebox_t125:-:::::::* cpe:2.3:h:watchguard:firebox_t145-w:-:::::::* cpe:2.3:h:watchguard:firebox_t145:-:::::::* cpe:2.3:h:watchguard:firebox_t15:-:::::::* cpe:2.3:h:watchguard:firebox_t185:-:::::::* cpe:2.3:h:watchguard:firebox_t20:-:::::::* cpe:2.3:h:watchguard:firebox_t25:-:::::::* cpe:2.3:h:watchguard:firebox_t35:-:::::::* cpe:2.3:h:watchguard:firebox_t40:-:::::::* cpe:2.3:h:watchguard:firebox_t45:-:::::::* cpe:2.3:h:watchguard:firebox_t55:-:::::::* cpe:2.3:h:watchguard:firebox_t70:-:::::::* cpe:2.3:h:watchguard:firebox_t80:-:::::::* cpe:2.3:h:watchguard:firebox_t85:-:::::::* cpe:2.3:h:watchguard:fireboxv:-:::::::* cpe:2.3:o:watchguard:fireware:::::::: cpe:2.3:o:watchguard:fireware:11.12.4:-:::::: cpe:2.3:o:watchguard:fireware:11.12.4:u1::::::
Vendors & Products		Watchguard firebox Cloud Watchguard firebox M270 Watchguard firebox M290 Watchguard firebox M295 Watchguard firebox M370 Watchguard firebox M390 Watchguard firebox M395 Watchguard firebox M440 Watchguard firebox M4600 Watchguard firebox M470 Watchguard firebox M4800 Watchguard firebox M495 Watchguard firebox M5600 Watchguard firebox M570 Watchguard firebox M5800 Watchguard firebox M590 Watchguard firebox M595 Watchguard firebox M670 Watchguard firebox M690 Watchguard firebox M695 Watchguard firebox Nv5 Watchguard firebox T115-w Watchguard firebox T125 Watchguard firebox T125-w Watchguard firebox T145 Watchguard firebox T145-w Watchguard firebox T15 Watchguard firebox T185 Watchguard firebox T20 Watchguard firebox T25 Watchguard firebox T35 Watchguard firebox T40 Watchguard firebox T45 Watchguard firebox T55 Watchguard firebox T70 Watchguard firebox T80 Watchguard firebox T85 Watchguard fireboxv Watchguard fireware
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}`

Aug 10, 2026 5:00 PM Description updated. Affected versions updated. Added references View changes

Type	Values Removed	Values Added
Description	A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware Web UI by convincing an authenticated administrator into visiting a malicious web page.This issue affects Fireware OS: 11.8 through 11.12.4+541730, 12.0 through 12.11.8, and 2025.1 through 2026.1.2.	A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware Web UI by convincing an authenticated administrator into visiting a malicious web page.
CPEs	cpe:2.3:a:watchguard:fireware_os::::::::11.8 cpe:2.3:a:watchguard:fireware_os::::::::12.0 cpe:2.3:a:watchguard:fireware_os::::::::12.5 cpe:2.3:a:watchguard:fireware_os::::::::2025.1	cpe:2.3:a:watchguard:fireware_os::::::::
References		https://psirt.watchguard.com/CVE-2026-4315

Mar 30, 2026 2:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mar 30, 2026 1:00 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware Web UI by convincing an authenticated administrator into visiting a malicious web page.This issue affects Fireware OS: 11.8 through 11.12.4+541730, 12.0 through 12.11.8, and 2025.1 through 2026.1.2.
Title		WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI
First Time appeared		Watchguard Watchguard fireware Os
Weaknesses		CWE-352
CPEs		cpe:2.3:a:watchguard:fireware_os::::::::11.8 cpe:2.3:a:watchguard:fireware_os::::::::12.0 cpe:2.3:a:watchguard:fireware_os::::::::12.5 cpe:2.3:a:watchguard:fireware_os::::::::2025.1
Vendors & Products		Watchguard Watchguard fireware Os
References		https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00006
Metrics		cvssV4_0 `{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}`

Subscriptions

Watchguard Firebox Cloud Firebox M270 Firebox M290 Firebox M295 Firebox M370 Firebox M390 Firebox M395 Firebox M440 Firebox M4600 Firebox M470 Firebox M4800 Firebox M495 Firebox M5600 Firebox M570 Firebox M5800 Firebox M590 Firebox M595 Firebox M670 Firebox M690 Firebox M695 Firebox Nv5 Firebox T115-w Firebox T125 Firebox T125-w Firebox T145 Firebox T145-w Firebox T15 Firebox T185 Firebox T20 Firebox T25 Firebox T35 Firebox T40 Firebox T45 Firebox T55 Firebox T70 Firebox T80 Firebox T85 Fireboxv Fireware Fireware Os

Weaknesses