https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T23:02:13.998069+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349473 EUVD-2026-349473 2026-10-18T23:02:14.001840+00:00 EUVD-2026-349473 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1071 fkie_cve-2025-1071 2026-10-18T23:02:14.001871+00:00

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the spamBlocker module. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management interface of another management user.

 https://cve.radiocsirt.org/vuln/ghsa-j9jw-jrhw-54vc GHSA-j9jw-jrhw-54vc 2026-10-18T23:02:14.001901+00:00

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the spamBlocker module. This vulnerability requires an authenticated administrator session to a locally managed Firebox.This issue affects Fireware OS: from 12.0 through 12.5.12+701324, from 12.6 through 12.11.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0376 WID-SEC-W-2025-0376 — WatchGuard Firebox: Mehrere Schwachstellen 2026-10-18T23:02:14.001920+00:00

Ein anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in WatchGuard Firebox ausnutzen, um Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen.