CVE-2025-6999: WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability
An HTTP Request Smuggling [CWE-444] vulnerability in the Authentication portal of WatchGuard Fireware OS allows a remote attacker to evade request parameter sanitation and perform a reflected self-Cross-Site Scripting (XSS) attack.
WatchGuard does not believe there is a practical exploit chain with a meaningful security impact for this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6999?
CVE-2025-6999 is classified as a high severity vulnerability due to its potential for exploitation through reflected self-XSS attacks.
How do I fix CVE-2025-6999?
To mitigate CVE-2025-6999, users should upgrade their WatchGuard Fireware OS to the latest version beyond 12.11.2.
Who is affected by CVE-2025-6999?
CVE-2025-6999 affects all versions of WatchGuard Fireware OS from 12.0 through 12.11.2.
What type of attack is associated with CVE-2025-6999?
CVE-2025-6999 is associated with HTTP Request Smuggling and reflected self-Cross-Site Scripting (XSS) attacks.
Can CVE-2025-6999 be exploited remotely?
Yes, CVE-2025-6999 can be exploited remotely by an attacker to evade request parameter sanitation.