CVE-2025-6999

Publication date

2025-09-15 21:17:51

Family

WatchGuard

State

PUBLISHED

Description

An HTTP Request Smuggling [CWE-444] vulnerability in the Authentication portal of WatchGuard Fireware OS allows a remote attacker to evade request parameter sanitation and perform a reflected self-Cross-Site Scripting (XSS) attack.This issue affects Fireware OS: from 12.0 through 12.11.2.