XSS in Watchguard Fireware Os
CVE-2026-13374
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Integration module) allows Stored XSS. This vulnerability is an additional unmitiga…
Vulnerability class: XSS (Cross-Site Scripting)
Affected products
- Watchguard Fireware Os — versions 12.4, 12.5, 2025.1
Weakness classification (CWE)
References
- 5d1c2695-1a31-4499-88ae-e847036fd7e3 (vendor-advisory)