This vulnerability involves improper neutralization of input during web page generation (CWE-79) in the spamBlocker module of WatchGuard Fireware OS. It allows stored cross-site scripting (XSS) attacks, which could enable an attacker with high privileges and partial user interaction to execute malicious scripts in the context of the affected system's web interface. The flaw is an additional attack vector complementing CVE-2025-1071. Affected versions include Fireware OS 12.0 up to and including 12.12, 12.5 up to and including 12.5.18, and 2025.1 up to and including 2026.2. No official remediation or patch is currently documented by the vendor.

The vulnerability enables stored XSS attacks in the spamBlocker module, potentially allowing attackers with high privileges and requiring some user interaction to execute malicious scripts within the Fireware OS web interface. This could lead to session hijacking, unauthorized actions, or other impacts typical of XSS vulnerabilities. However, the CVSS score and vector indicate no direct confidentiality, integrity, or availability impact without user interaction and high privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or mitigation has been documented at this time. Until a patch is available, limit access to the Fireware OS management interface to trusted administrators and monitor for suspicious activity related to the spamBlocker module. Avoid exposing the management interface to untrusted networks.