Medium severity4.8NVD Advisory· Published Jul 3, 2026· Updated Aug 28, 2026
CVE-2026-13375
CVE-2026-13375
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integration module) allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-13938.
This issue affects Fireware OS 12.4 up to and including 12.12, 12.5 up to and including 12.5.18, and 2025.1 up to and including 2026.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*range: >=12.4,<12.12.1
- (no CPE)range: 12.4 - 12.12, 12.5 - 12.5.18, 2025.1 - 2026.2
- Range: 12.4 - 12.12, 12.5 - 12.5.18, 2025.1 - 2026.2
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.