CVE-2025-4805 is a stored XSS vulnerability in WatchGuard Fireware OS affecting versions from 12.0 up to and including 12.11.1. The flaw arises from improper input neutralization during web page generation, enabling an attacker with authenticated administrator access to inject malicious scripts that persist and execute in the administrator's browser. Exploitation requires local management access and administrator privileges, limiting the attack surface to authenticated users. There are no known exploits in the wild, and no official patch or remediation details are provided in the available data.

An attacker with authenticated administrator access to a locally managed Firebox device can inject and store malicious scripts that execute in the context of the administrator's browser session. This can lead to unauthorized actions performed with administrator privileges, potentially compromising device management or exposing sensitive information accessible through the administrator interface. The vulnerability does not allow unauthenticated remote exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrator access to trusted personnel only and ensure that local management interfaces are not exposed to untrusted networks. Monitor vendor communications for updates regarding patches or official mitigations.