A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in t…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 30, 2026 · NIST NVD

   Detected

   A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware Web UI by convincing an authenticated administrator into visiting a malicious web page.

2. Aug 28, 2026 · NIST NVD

   Updated

   A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware Web UI by convincing an authenticated administrator into visiting a malicious web page.

Affected

• cpe watchguard/firewareversion unspecified
• cpe watchguard/fireware11.12.4

Sources

• CVE.orgVulnerability recordCVE-2026-4315

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-4315

  A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware Web UI by convincing an authenticated administrator into visiting a malicious web page.

  nvd.nist.gov

References

• Broken Link · psirt.watchguard.com
• Vendor Advisory · watchguard.com