Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-57910 EUVD-2026-65438GHSA-6c89-2v98-5qj2

WatchGuard Agent improper authentication allows unauthenticated remote code execution

Published Aug 25, 2026 · Updated Sep 9, 2026 · Assigned by WatchGuard

Description

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

Affected products

VendorProductAffectedFixed
WatchGuard WatchGuard Agent < 1.17.01.0000, < 1.25.13.0000, < 1.17.21.0000 1.17.01.0000

References