VulnSocial

CVE-2026-3342Disclosure(watchguard / firebox_m270)

LOWCVSS 7.2 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch watchguard firebox_m270 systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1.

watchguard CVEsBack to dashboard
2.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • firebox_m270
  • firebox_m290
  • firebox_m295
  • firebox_m370

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 8 mentions across 6 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 5 signals
  • Disclosure: 6 classified signals
  • General: 1 classified signal
  • Peaked 5d ago at 2 mentions (2026-03-03); latest day: 1
  • 8 total mentions across 6 days

Affected systems

Vendors
watchguard
Products
firebox_m270firebox_m290firebox_m295firebox_m370firebox_m390firebox_m395firebox_m440firebox_m4600firebox_m470firebox_m4800

1 version affected across 39 products

Deep dive

Activity timeline8 mentions / 6d
01122Mentions · 2026-03-03: 2Mentions · 2026-03-06: 1Mentions · 2026-03-09: 1Mentions · 2026-03-17: 1Mentions · 2026-03-18: 2Mentions · 2026-03-19: 1PoC Mentioned / Linked · 2026-03-19: 1Patch / Workaround · 2026-03-09: 1Patch / Workaround · 2026-03-17: 1Technical Details · 2026-03-03: 2Technical Details · 2026-03-09: 1Technical Details · 2026-03-17: 1Technical Details · 2026-03-19: 103-0303-0603-0903-1703-1803-19
Signal classification3 categories
Disclosure
675.0%
Patch
112.5%
General
112.5%
Referenced assets9 URLs
Classification over time
DateTotalLabels
2026-03-032
Disclosure2
2026-03-061
Disclosure1
2026-03-091
Patch1
2026-03-171
Disclosure1
2026-03-182
Disclosure1General1
2026-03-191
Disclosure1
Full discourse8 posts
  • Praetorian@praetorianlabs
    Disclosure

    🚨 CVE-2026-3342: Critical RCE in WatchGuard Fireware OS • CVSS 7.2 (High) • Affects versions 11.9-2026.1.1 • Out-of-bounds write → root code execution • Requires admin access but network exploitable Patch ASAP when available. https://www.praetorian.com/?p=10721 #CVE2026

    Post summary

    WatchGuard Fireware OS suffers a critical remote code execution flaw (CVE-2026-3342) via out-of-bounds write, rated CVSS 7.2. Prompt patching is recommended once released.

    21101841.4K
    8.5K followersView on X
  • Praetorian@praetorianlabs
    Disclosure

    🔥 CVE-2026-3342 — CVSS 7.2 out-of-bounds write in WatchGuard Fireware OS. Privileged admins can hit root via exposed management interfaces. Full breakdown below. 🔗 https://buff.ly/1H1weHt #OffensiveSecurity #VulnerabilityResearch #NetworkSecurity #Praetorian

    Post summary

    The tweet discloses a new out‑of‑bounds write vulnerability (CVE‑2026‑3342) in WatchGuard Fireware OS with a CVSS score of 7.2, highlighting privileged admin escalation to root via exposed management interfaces; a linked resource likely contains a full technical breakdown.

    03022326
    8.5K followersView on X
  • CVETrends@CVEShield
    General

    Top 5 Trending CVEs: 1 - CVE-2026-3342 2 - CVE-2026-4149 3 - CVE-2026-32635 4 - CVE-2025-41237 5 - CVE-2019-17571 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard

    Post summary

    The tweet simply enumerates five trending CVEs without additional technical context, exploitation details, or patch information.

    00010169
    1.7K followersView on X
  • ThaiCERT By NCSA@ThaiCERTByNCSA
    Patch

    🛑 ด่วน! Patch หรือยัง? WatchGuard ออกอัปเดตแก้ช่องโหว่ร้ายแรงใน Fireware OS 🛑 ⚠️ ThaiCERT ได้ติดตามสถานการณ์ภัยคุกคามทางไซเบอร์ และพบประกาศด้านความมั่นคงปลอดภัยจาก WatchGuard เกี่ยวกับช่องโหว่ CVE-2026-3342 ซึ่งเป็นช่องโหว่ประเภท Out-of-bounds Write ใน WatchGuard Fireware OS โดยอาจเปิดโอกาสให้ ผู้โจมตีที่ยืนยันตัวตนแล้วและมีสิทธิ์ผู้ดูแลระดับ privileged administrator สามารถใช้ management interface ที่เปิดเข้าถึงได้ เพื่อ รันโค้ดด้วยสิทธิ์ root บนอุปกรณ์ที่ได้รับผลกระทบ ส่งผลให้มีความเสี่ยงสูงต่อการถูกยึดระบบหรือแก้ไขการตั้งค่าความมั่นคงปลอดภัยของอุปกรณ์. 1. รายละเอียดช่องโหว่ CVE-2026-3342 - Out-of-bounds Write in WatchGuard Fireware OS (CVSS v3.1: 7.2) ช่องโหว่นี้เกิดจากการเขียนข้อมูลเกินขอบเขตหน่วยความจำและอาจทำให้ผู้ดูแลระบบที่ผ่านการยืนยันตัวตนแล้ว สามารถ execute arbitrary code with root permissions ผ่าน exposed management interface ได้ 2. ผลิตภัณฑ์ที่ได้รับผลกระทบ - Fireware OS 11.9 ถึง 11.12.4_Update1 - Fireware OS 12.0 ถึง 12.11.7 - Fireware OS 2025.1 ถึง 2026.1.1 3. แนวทางการแก้ไข - อัพเดท Fireware OS 2026.1.2 - อัพเดท Fireware OS 12.11.8 - สำหรับ Fireware OS 12.5.x (T15 & T35 models) ให้อัปเดตเป็น 12.5.17 - สำหรับ Fireware OS 11.x ผู้ผลิตระบุว่าเป็น End of Life แล้ว จึงควรวางแผนอัปเกรดหรือเปลี่ยนทดแทนโดยเร็ว. 4. หากยังไม่สามารถอัปเดตได้ ควรดำเนินการดังนี้ ไม่มี workaround สำหรับช่องโหว่นี้ควรรีบดำเนินการอัพเดทโดยด่วน 5. แหล่งอ้างอิง - https://dg.th/m3bh0e9pfd - https://dg.th/ehtnqcjbpk

    Post summary

    The advisory provides up‑to‑date patch information and technical details for CVE‑2026‑3342 affecting WatchGuard Fireware OS, emphasizing the need for immediate updates.

    0100072
    50 followersView on X
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidad en productos WatchGuard ❗ CVE-2026-3342 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-watchguard-4/ https://t.co/fxlLffO4Ca

    Post summary

    The tweet announces CVE‑2026‑3342 for WatchGuard products and provides a link for more information, but offers no technical specifics, patch information, or evidence of exploitation.

    00001101
    6.6K followersView on X
  • VulnTracker@vuln_tracker
    Disclosure

    @praetorianlabs Critical WatchGuard vulnerability! CVE-2026-3342 affecting Fireware OS versions 11.9-2026.1.1 means a lot of enterprise firewalls need immediate attention. https://vulntracker.io/cves/CVE-2026-3342

    Post summary

    A new CVE (CVE‑2026‑3342) affecting WatchGuard Fireware OS versions is publicly announced, urging immediate attention, but no exploit details or patch information are included.

    0000069
    434 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-3342 An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via a… https://www.cve.org/CVERecord?id=CVE-2026-3342 ----- Traducción: CVE-2026-3342 Un … http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-3342, describing an out-of-bounds write that could allow privileged administrators to run arbitrary code with root privileges on WatchGuard Fireware OS.

    0000027
    55 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-3342 An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via a… https://www.cve.org/CVERecord?id=CVE-2026-3342

    Post summary

    The text announces CVE‑2026‑3342, an out‑of‑bounds write vulnerability in WatchGuard Fireware OS that could enable privileged administrators to run arbitrary code with root privileges.

    00000349
    56.6K followersView on X
CPE platform detail39 entries

39 of 39 entries

PartVendorProductVersionTarget SWTarget HW
HWwatchguardfirebox_m270---
HWwatchguardfirebox_m290---
HWwatchguardfirebox_m295---
HWwatchguardfirebox_m370---
HWwatchguardfirebox_m390---
HWwatchguardfirebox_m395---
HWwatchguardfirebox_m440---
HWwatchguardfirebox_m4600---
HWwatchguardfirebox_m470---
HWwatchguardfirebox_m4800---
HWwatchguardfirebox_m495---
HWwatchguardfirebox_m5600---
HWwatchguardfirebox_m570---
HWwatchguardfirebox_m5800---
HWwatchguardfirebox_m590---
HWwatchguardfirebox_m595---
HWwatchguardfirebox_m670---
HWwatchguardfirebox_m690---
HWwatchguardfirebox_m695---
HWwatchguardfirebox_nv5---
HWwatchguardfirebox_t115-w---
HWwatchguardfirebox_t125---
HWwatchguardfirebox_t125-w---
HWwatchguardfirebox_t145---
HWwatchguardfirebox_t145-w---
HWwatchguardfirebox_t15---
HWwatchguardfirebox_t185---
HWwatchguardfirebox_t20---
HWwatchguardfirebox_t25---
HWwatchguardfirebox_t35---
HWwatchguardfirebox_t40---
HWwatchguardfirebox_t45---
HWwatchguardfirebox_t55---
HWwatchguardfirebox_t70---
HWwatchguardfirebox_t80---
HWwatchguardfirebox_t85---
HWwatchguardfireboxcloud---
HWwatchguardfireboxv---
OSwatchguardfireware---

Explore more

Back to dashboardwatchguard CVEsfirebox_m270 vulnerabilities