CVE-2026-13373

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.4 through 12.12 WatchGuard Fireware OS versions 12.5 through 12.5.18 WatchGuard Fireware OS versions 2025.1 through 2026.2

Description Stored Cross-site Scripting (XSS), which occurs when an application includes untrusted data in a web page without proper validation or encoding, exists within the Tigerpaw Technology Integration module. This issue provides an additional unmitigated attack path for a related security flaw.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.