CVE Feed

    Dashboard / CVE / CVE-2026-6788

    CVE-2026-6788

    Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.

    Published:May 6, 2026
    Last Modified:Aug 10, 2026
    EPS:May 6, 2026
    EPSS Score:0.00121
    CVSS Score:7.8

    Affected Products

    Vendor
    Watchguard
    Product
    Agent
    Vendor
    Watchguard
    Product
    Single Watchguard Agent
    Vendor
    Watchguard
    Product
    Watchguard Agent

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-427 Uncontrolled Search Path Element

    Related CVEs

    CVE-2026-57910 (CVSS 9.3) — Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to caus…
    CVE-2026-57909 (CVSS 9.4) — A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent ne…
    CVE-2026-6787 (CVSS 8.5) — Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in E…
    CVE-2026-41286 (CVSS 7.1) — Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow…
    CVE-2026-41288 (CVSS 7.3) — Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Wi…
    CVE-2026-41287 (CVSS 7.1) — Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High