https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T18:52:29.930875+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-13376 CVE-2026-13376 — WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module 2026-10-05T18:52:29.946831+00:00

Affected: WatchGuard Fireware OS

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS spamBlocker module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-1071.

This issue affects Fireware OS 12.0 up to and including 12.12, 12.5 up to and including 12.5.18, and 2025.1 up to and including 2026.2.