This vulnerability (CVE-2025-13936) in WatchGuard Fireware OS arises from improper neutralization of input during web page generation, classified as CWE-79 (Cross-site Scripting). It allows stored XSS attacks within the Tigerpaw Technology Integration module, enabling attackers with high privileges to inject malicious scripts that can execute in other users' browsers. The CVSS 4.0 base score is 4.8 (medium), reflecting network attack vector, low complexity, no privileges required for attack initiation, but requiring high privileges to exploit. The vulnerability affects versions =12.0, =12.4, =12.5, and =2025.1. No patches or vendor advisories indicating fixes are currently available.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of other users, potentially leading to session hijacking, unauthorized actions, or data exposure within the affected module. However, the attack complexity is low and user interaction is required. There are no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit access to the affected module to trusted users with high privileges and monitor for suspicious activity involving web input fields. Avoid exposing the Tigerpaw Technology Integration module to untrusted networks or users.