VulnSocial

CVE-2026-4315Disclosure(watchguard / firebox_cloud)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware Web UI by convincing an authenticated administrator into visiting a malicious web page.

watchguard CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-352

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • firebox_cloud
  • firebox_m270
  • firebox_m290
  • firebox_m295

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-03-30); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
watchguard
Products
firebox_cloudfirebox_m270firebox_m290firebox_m295firebox_m370firebox_m390firebox_m395firebox_m440firebox_m4600firebox_m470

2 versions affected across 39 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-30: 2Mentions · 2026-04-06: 1Technical Details · 2026-03-30: 203-3004-06
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-302
Disclosure2
2026-04-061
Disclosure1
Full discourse3 posts
  • drak3hft7@drak3hft7
    Disclosure

    I’ve added a new entry to my CVE list , CVE number 1️⃣ 3️⃣ . CVE-2026-4315 The issue is a Cross-Site Request Forgery (CSRF) in the Fireware OS Web UI that can allow a remote attacker to trigger a denial-of-service (DoS) condition by luring an authenticated administrator into visiting a malicious page. Impact: High (CVSS 7.1) Advisory: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00006 The issue was identified through @Hacker0x01 . #bugbounty #cybersecurity #securityresearch #cve

    Post summary

    A new CVE (CVE-2026-4315) has been disclosed: a CSRF vulnerability in Fireware OS Web UI can cause DoS via a malicious link; advisory and CVSS score provided.

    1102242.1K
    3.4K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-4315 A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in th… https://www.cve.org/CVERecord?id=CVE-2026-4315

    Post summary

    The snippet announces a CSRF vulnerability in WatchGuard Fireware OS that could cause a DoS condition, but does not include PoC, exploit code, or patch information.

    0001065
    56.8K followersView on X
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidades en productos WatchGuard ❗ CVE-2026-4315 ❗ CVE-2026-4266 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-watchguard-2/ https://t.co/QxvhVpRfkx

    Post summary

    The post announces the presence of two CVEs affecting WatchGuard products and directs readers to an external link for further information.

    00000131
    6.6K followersView on X
CPE platform detail41 entries

41 of 41 entries

PartVendorProductVersionTarget SWTarget HW
Appwatchguardfirebox_cloud---
HWwatchguardfirebox_m270---
HWwatchguardfirebox_m290---
HWwatchguardfirebox_m295---
HWwatchguardfirebox_m370---
HWwatchguardfirebox_m390---
HWwatchguardfirebox_m395---
HWwatchguardfirebox_m440---
HWwatchguardfirebox_m4600---
HWwatchguardfirebox_m470---
HWwatchguardfirebox_m4800---
HWwatchguardfirebox_m495---
HWwatchguardfirebox_m5600---
HWwatchguardfirebox_m570---
HWwatchguardfirebox_m5800---
HWwatchguardfirebox_m590---
HWwatchguardfirebox_m595---
HWwatchguardfirebox_m670---
HWwatchguardfirebox_m690---
HWwatchguardfirebox_m695---
HWwatchguardfirebox_nv5---
HWwatchguardfirebox_t115-w---
HWwatchguardfirebox_t125---
HWwatchguardfirebox_t125-w---
HWwatchguardfirebox_t145---
HWwatchguardfirebox_t145-w---
HWwatchguardfirebox_t15---
HWwatchguardfirebox_t185---
HWwatchguardfirebox_t20---
HWwatchguardfirebox_t25---
HWwatchguardfirebox_t35---
HWwatchguardfirebox_t40---
HWwatchguardfirebox_t45---
HWwatchguardfirebox_t55---
HWwatchguardfirebox_t70---
HWwatchguardfirebox_t80---
HWwatchguardfirebox_t85---
HWwatchguardfireboxv---
OSwatchguardfireware---
OSwatchguardfireware11.12.4--
OSwatchguardfireware11.12.4--

Explore more

Back to dashboardwatchguard CVEsfirebox_cloud vulnerabilities