CVE-2026-13376

Опубликовано: 03 июл. 2026

Источник: nvd

CVSS3: 4.8

EPSS Низкий

Описание

This issue affects Fireware OS 12.0 up to and including 12.12, 12.5 up to and including 12.5.18, and 2025.1 up to and including 2026.2.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*

Версия от 12.0 (включая) до 12.12.1 (исключая)

Одно из

cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*

Версия от 2025.1 (включая) до 2026.2.1 (исключая)

Одно из

cpe:2.3:h:watchguard:firebox_m295:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m395:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m495:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m595:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m695:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t115-w:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t125:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t125-w:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t145:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t145-w:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t185:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*

Версия от 12.5 (включая) до 12.5.18 (включая)

Одно из

cpe:2.3:h:watchguard:firebox_t15:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t35:-:*:*:*:*:*:*:*

EPSS

Процентиль: 7%

0.00169

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-35hv-3mxg-g72p

CVSS3: 4.8

github

около 1 месяца назад

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS spamBlocker module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-1071. This issue affects Fireware OS 12.0 up to and including 12.12, 12.5 up to and including 12.5.18, and 2025.1 up to and including 2026.2.

EPSS

Процентиль: 7%

0.00169

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79