A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may allow a privileged authenticated remote attacker to execute arbitrary code i…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 1, 2026 · NIST NVD

   Detected

   A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may allow a privileged authenticated remote attacker to execute arbitrary code in the context of an elevated system process.

2. Aug 14, 2026 · NIST NVD

   Updated

   A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may allow a privileged authenticated remote attacker to execute arbitrary code in the context of an elevated system process.

Affected

• cpe watchguard/firewareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-3987

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-3987

  A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may allow a privileged authenticated remote attacker to execute arbitrary code in the context of an elevated system process.

  nvd.nist.gov

References

• Broken Link · psirt.watchguard.com
• Vendor Advisory · watchguard.com