Skip to content
OpenAdvisories
High · 8.5 CVE-2026-57907 EUVD-2026-121398GHSA-wpv7-489q-j26m

WatchGuard Endpoint Protection Local Privilege Escalation in Console-Service Communication Allows SYSTEM Code Execution

Published Nov 10, 2026 · Updated Nov 10, 2026 · Assigned by WatchGuard

Description

A privilege escalation vulnerability in WatchGuard Endpoint Protection's inter-process communication between the console and the protection service allows a local, low-privileged authenticated user to execute arbitrary code with SYSTEM privileges by injecting code into the trusted console process and issuing privileged commands to the service.

Affected products

VendorProductAffectedFixed
WatchGuard Endpoint Security < 8.00.26.0011 8.00.26.0011

References