This vulnerability (CVE-2026-13373) in WatchGuard Fireware OS's Tigerpaw Technology Integration module involves improper neutralization of input during web page generation, leading to stored cross-site scripting (CWE-79). It provides an additional attack vector related to a previously known vulnerability (CVE-2025-13936). The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and low scope impact. The vulnerability is published but lacks an official remediation level or patch at this time.

Successful exploitation could allow an attacker to inject malicious scripts that are stored and executed in the context of the affected web application, potentially leading to session hijacking, unauthorized actions, or information disclosure within the scope of the affected module. The impact is rated medium severity with no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, monitor vendor communications for updates. No official mitigation or temporary fix has been provided by WatchGuard at this time.