High · 8.6 CVE-2026-87969 EUVD-2026-88363GHSA-3h42-6x4m-fcjv

WatchGuard AP Authenticated Command Injection in Diagnostic CLI

Published Sep 28, 2026 · Updated Sep 28, 2026 · Assigned by WatchGuard

Vendor: WatchGuard Product: WatchGuard AP

Description

An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying crafted input.

Affected products

Vendor	Product	Affected	Fixed
WatchGuard	WatchGuard AP	1.0 – < 3.4.8	3.4.8

References

https://psirt.watchguard.com/CVE-2026-87969 vendor-advisory