CVE-2025-13939

WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller

MEDIUM

6.1

CVSS Score

Published: December 4, 2025 at 09:47 PM UTC

Updated: September 25, 2026 at 11:27 PM UTC

34 products affected across 1 vendorFirewareFirebox T55Firebox M4800

Using Fireware OS by WatchGuard?

Get instant alerts when new vulnerabilities affect Fireware OS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.1

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Gateway Wireless Controller module) allows Stored XSS.This issue affects Fireware OS 11.7.2 up to and including 11.12.4+541730, 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up to and including 2025.1.2.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Fireware · WatchGuard

95%

11.7.2 ≤ v ≤ 11.12.4+54173011.7.2 ≤ v < 12.11.511.7.2 ≤ v < 12.5.1412.0 ≤ v < 12.11.512.0 ≤ v < 12.5.142025.1 ≤ v < 2025.1.311.7.2 12.0 2025.1

Affected range stops below 12.11.5, so it looks safe — our inference, not a vendor statement

Affected range stops below 12.5.14, so it looks safe — our inference, not a vendor statement

Affected range stops below 2025.1.3, so it looks safe — our inference, not a vendor statement

watchguard-firebox-m270 (environment) · watchguard-firebox-m290 (environment) · watchguard-firebox-m370 (environment) · watchguard-firebox-m390 (environment) · watchguard-firebox-m440 (environment) · watchguard-firebox-m4600 (environment) · watchguard-firebox-m470 (environment) · watchguard-firebox-m4800 (environment) · watchguard-firebox-m5600 (environment) · watchguard-firebox-m570 (environment) · watchguard-firebox-m5800 (environment) · watchguard-firebox-m590 (environment) · watchguard-firebox-m670 (environment) · watchguard-firebox-m690 (environment) · watchguard-firebox-nv5 (environment) · watchguard-firebox-t115-w (environment) · watchguard-firebox-t125 (environment) · watchguard-firebox-t125-w (environment) · watchguard-firebox-t145 (environment) · watchguard-firebox-t145-w (environment) · watchguard-firebox-t15 (environment) · watchguard-firebox-t185 (environment) · watchguard-firebox-t20 (environment) · watchguard-firebox-t25 (environment) · watchguard-firebox-t35 (environment) · watchguard-firebox-t40 (environment) · watchguard-firebox-t45 (environment) · watchguard-firebox-t55 (environment) · watchguard-firebox-t70 (environment) · watchguard-firebox-t80 (environment) · watchguard-firebox-t85 (environment) · watchguard-fireboxcloud (environment) · watchguard-fireboxv (environment)

Firebox M270 · WatchGuarddevice

80%

All versions

Firebox M290 · WatchGuarddevice

80%

All versions

Firebox M370 · WatchGuarddevice

80%

All versions

Firebox M390 · WatchGuarddevice

80%

All versions