This vulnerability (CVE-2026-13374) in WatchGuard Fireware OS arises from improper neutralization of input during web page generation, leading to stored cross-site scripting (CWE-79). It affects the ConnectWise Technology Integration module, allowing attackers with high privileges and requiring user interaction to inject malicious scripts that persist and execute within the application. The vulnerability is an additional attack vector related to a previously identified issue (CVE-2025-13937). The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, but user interaction is needed, with limited confidentiality and integrity impact and low scope impact. No known exploits are reported in the wild, and no official remediation or patch is currently available.

Successful exploitation could allow an attacker to execute stored malicious scripts within the context of the Fireware OS web interface, potentially leading to unauthorized actions or information disclosure within the affected module. The impact is limited by the requirement for high privileges and user interaction, and the overall severity is rated medium. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been provided by WatchGuard, users should monitor vendor communications for updates. Until a patch is available, limiting access to the affected module and exercising caution with user inputs may reduce risk.