Skip to content
OpenAdvisories
Critical · 9.4 CVE-2026-57909 EUVD-2026-65439GHSA-6fjc-c8m9-93pm

WatchGuard Agent path traversal allows unauthenticated remote code execution

Published Aug 25, 2026 · Updated Aug 26, 2026 · Assigned by WatchGuard

Description

A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system.

Affected products

VendorProductAffectedFixed
WatchGuard WatchGuard Agent < 1.25.13.0000 1.25.13.0000

References