CVE-2026-13374

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.4 through 12.12 WatchGuard Fireware OS versions 12.5 through 12.5.18 WatchGuard Fireware OS versions 2025.1 through 2026.2

Description Stored Cross-site Scripting (XSS) exists in the ConnectWise Technology Integration module. This occurs due to improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that are stored on the server and later executed in the browser of other users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.