XSS in Watchguard Fireware Os
CVE-2026-13376
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS spamBlocker module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2…
Vulnerability class: XSS (Cross-Site Scripting)
Affected products
- Watchguard Fireware Os — versions 12.0, 12.5, 2025.1
Weakness classification (CWE)
References
- 5d1c2695-1a31-4499-88ae-e847036fd7e3 (vendor-advisory)