CVE-2025-6946

Name of the Vulnerable Software and Affected Versions WatchGuard Firebox versions 12.0 through 12.11.2

Description A stored cross-site scripting (XSS) issue exists in the management interface of WatchGuard Fireware OS via the IPS module. This occurs due to improper neutralization of input during web page generation. An authenticated remote attacker with administrator privileges can exploit this to execute arbitrary JavaScript code within the management interface of another administrative user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.