CVE Feed

    Dashboard / CVE / CVE-2026-57909

    CVE-2026-57909

    A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system.

    Published:Aug 25, 2026
    Last Modified:Aug 25, 2026
    EPS:Aug 25, 2026
    EPSS Score:
    CVSS Score:9.4

    Affected Products

    Vendor
    Watchguard
    Product
    Agent
    Vendor
    Watchguard
    Product
    Watchguard Agent

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-57910 (CVSS 9.3) — Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to caus…
    CVE-2026-6788 (CVSS 8.5) — Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.…
    CVE-2026-6787 (CVSS 8.5) — Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in E…
    CVE-2026-41286 (CVSS 7.1) — Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow…
    CVE-2026-41288 (CVSS 7.3) — Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Wi…
    CVE-2026-41287 (CVSS 7.1) — Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High