CVE-2022-26318

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

Affected products

Fireware Os, Watchguard Firebox, Watchguard Xtm

Watchguard Fireware

< 12.1.3, 12.5.9, 12.7.2

Fix

Available

CVSS 3.1

9.8 CRITICAL

EPSS

78.2% (100th percentile)

NVD status

Analyzed

Published

2022-03-04