CVE Feed

    Dashboard / CVE / CVE-2026-57910

    CVE-2026-57910

    Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

    Published:Aug 25, 2026
    Last Modified:Aug 25, 2026
    EPS:Aug 25, 2026
    EPSS Score:
    CVSS Score:9.3

    Affected Products

    Vendor
    Watchguard
    Product
    Agent
    Vendor
    Watchguard
    Product
    Watchguard Agent

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-12 Choosing Message Identifier
    CAPEC-166 Force the System to Reset Values
    CAPEC-184 Software Integrity Attack
    CAPEC-185 Malicious Software Download
    CAPEC-186 Malicious Software Update
    CAPEC-187 Malicious Automated Software Update via Redirection
    CAPEC-216 Communication Channel Manipulation
    CAPEC-36 Using Unpublished Interfaces or Functionality
    CAPEC-463 Padding Oracle Crypto Attack
    CAPEC-475 Signature Spoofing by Improper Validation
    CAPEC-533 Malicious Manual Software Update
    CAPEC-538 Open-Source Library Manipulation
    CAPEC-62 Cross Site Request Forgery
    CAPEC-657 Malicious Automated Software Update via Spoofing
    CAPEC-662 Adversary in the Browser (AiTB)
    CAPEC-691 Spoof Open-Source Software Metadata
    CAPEC-692 Spoof Version Control System Commit Metadata
    CAPEC-693 StarJacking
    CAPEC-695 Repo Jacking

    Related CVEs

    CVE-2026-57909 (CVSS 9.4) — A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent ne…
    CVE-2026-6788 (CVSS 8.5) — Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.…
    CVE-2026-6787 (CVSS 8.5) — Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in E…
    CVE-2026-41286 (CVSS 7.1) — Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow…
    CVE-2026-41288 (CVSS 7.3) — Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Wi…
    CVE-2026-41287 (CVSS 7.1) — Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High