VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Jul 3, 2026· Updated Aug 28, 2026

CVE-2026-13376

CVE-2026-13376

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS spamBlocker module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-1071.

This issue affects Fireware OS 12.0 up to and including 12.12, 12.5 up to and including 12.5.18, and 2025.1 up to and including 2026.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • WatchGuard/Fireware2 versions
    cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*range: >=12.0,<12.12.1
    • (no CPE)range: <=12.12, <=12.5.18, <=2026.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.