by Kastro
Paper/Archive/CVE-2026-57910

CVE-2026-57910

WatchGuard WatchGuard Agent — WatchGuard Agent improper authentication allows unauthenticated remote code execution

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
31
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 15.8.158 × 203.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

Affected

ProductAffectedFixed inSource
WatchGuard Agent< 1.17.01.00001.17.01.0000CNA
WatchGuard Agent< 1.25.13.00001.25.13.0000CNA
WatchGuard Agent< 1.17.21.00001.17.21.0000CNA

Scores by source

WatchGuard (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorypsirt.watchguard.com/CVE-2026-57910