Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-4315

WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WatchGuard

Description

A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware Web UI by convincing an authenticated administrator into visiting a malicious web page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WatchGuard Fireware OS

Default version status: unaffected

  • 2025.1 to < 2026.2affected
  • 12.0 to < 12.12affected
  • 11.8 to ≤ 11.12.4+541730affected

WatchGuard Fireware OS

Default version status: unaffected

  • 12.0 to < 12.11.9affected

WatchGuard Fireware OS

Default version status: unaffected

  • 12.0 to < 12.5.18affected

References