CVE-2026-13377

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.0 through 12.12 WatchGuard Fireware OS versions 12.5 through 12.5.18 WatchGuard Fireware OS versions 2025.1 through 2026.2

Description The SIP Proxy module contains a flaw involving improper neutralization of input during web page generation, which enables Stored Cross-site Scripting (XSS). XSS is a type of attack where malicious scripts are injected into trusted websites. This issue serves as an additional unmitigated attack path for another known flaw.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.