This vulnerability is a CSRF issue in the WatchGuard Fireware OS WebUI that can be exploited remotely to trigger a denial-of-service condition. The attack requires an authenticated administrator to be tricked into visiting a malicious web page, which then causes the Fireware Web UI to become unavailable. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on availability. Affected versions include Fireware OS versions >=11.8 <=11.12.4+541730, >=12.0 <=12.11.8, and >=2025.1 <=2026.1.2. No vendor advisory or patch information is provided in the source data.

Successful exploitation results in a denial-of-service condition in the Fireware Web UI, potentially disrupting administrative access to the device. The attack requires user interaction from an authenticated administrator but does not require privileges or user credentials to be compromised. There is no indication of data confidentiality or integrity impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should avoid visiting untrusted web pages while authenticated to the Fireware Web UI to reduce the risk of CSRF exploitation.