CVE-2026-13374 (CVSS 4.8)

Back Aigip.Ai

CVE-2026-13374 (CVSS 4.8)

Aigip.Ai • August 11, 2026

Share: View original

The item discusses a Cross-site Scripting (XSS) vulnerability in WatchGuard Fireware OS, which allows for Stored XSS attacks.

The item discusses a Cross-site Scripting (XSS) vulnerability in WatchGuard Fireware OS, which allows for Stored XSS attacks.

While relevant to cybersecurity, it does not pertain to AI governance or compliance.

Read the original at NVD — National Vulnerability Database →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Stored XSS Vulnerability in WatchGuard Fireware OS (CVE-2026-13374) A Cross-site Scripting (XSS) vulnerability, identified as CVE-2026-13374, has been discovered in WatchGuard Fireware OS, specifically within the ConnectWise Technology Integration module. This vulnerability allows for Stored XSS attacks, which can lead to unauthorized access and data manipulation. It is an additional attack vector related to CVE-2025-13937. The affected versions include Fireware OS 12.4 through 12.12, 12.5 up to 12.5.18, and 2025.1 through 2026.2. The vulnerability was published on July 2, 2026, and is currently unmitigated, posing a significant risk to users of the affected software. Security professionals are advised to monitor the situation closely and apply any forthcoming patches. 2 sources 52

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Cwe-79 - Cross-site Scripting (xss)

Platforms (1)

WatchGuard Fireware OS

Vulnerabilities (1)