Security Advisory

CVE-2025-6999

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-09-15 21:17:51

Last updated 2026-08-10 15:26:28

Assigner WatchGuard

CVSS score 6.9

State PUBLISHED

Description

An HTTP Request Smuggling [CWE-444] vulnerability in the Authentication portal of WatchGuard Fireware OS allows a remote attacker to evade request parameter sanitation and perform a reflected self-Cross-Site Scripting (XSS) attack. WatchGuard does not believe there is a practical exploit chain with a meaningful security impact for this vulnerability.

← Browse all CVEs View on cve.org ↗