Description
A privilege escalation vulnerability in WatchGuard Endpoint Protection's inter-process communication between the console and the protection service allows a local, low-privileged authenticated user to execute arbitrary code with SYSTEM privileges by injecting code into the trusted console process and issuing privileged commands to the service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WatchGuard | Endpoint Security | < 8.00.26.0011 | 8.00.26.0011 |
References
- https://psirt.watchguard.com/CVE-2026-57907 vendor-advisory