Medium severity4.8NVD Advisory· Published Dec 4, 2025· Updated Sep 25, 2026
CVE-2025-6946
CVE-2025-6946
Description
A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management ninterface of another management user.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
312.0+ 1 more
- (no CPE)range: 12.0
- cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*range: >=12.0.0,<12.11.3
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.