Vulnerabilities

TI-2026-41690 CVE-2026-57910 · GHSA-6c89-2v98-5qj2

WatchGuard Agent improper authentication allows unauthenticated remote code execution

MEDIUM 48

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00245 Published 2026-08-25 Fixed in 1.17.01.0000, 1.25.13.0000 +1 CWE-306

TI-2026-41689 CVE-2026-57909 · GHSA-6fjc-c8m9-93pm

WatchGuard Agent path traversal allows unauthenticated remote code execution

MEDIUM 43

A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system.

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.00407 Published 2026-08-25 Fixed in 1.25.13.0000 CWE-306

Vulnerabilities

Filters

WatchGuard Agent improper authentication allows unauthenticated remote code execution

WatchGuard Agent path traversal allows unauthenticated remote code execution