CVE-2026-41288: falha de alta gravidade em WatchGuard Agent
WatchGuard Agent on Windows Privilege Escalation Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.3epss 0.1%
Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to elevate their privileges to NT AUTHORITY\\SYSTEM.
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
WatchGuard · WatchGuard AgentCVEs relacionadas — WatchGuard Agent
No mesmo produto, das mais perigosas para as menos.
CVE-2026-57909CRITICALWatchGuard Agent path traversal allows unauthenticated remote code executionEPSS 0.4%CVE-2026-41286HIGHStack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant BEPSS 0.3%CVE-2026-41287HIGHStack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant AEPSS 0.3%CVE-2026-57910CRITICALWatchGuard Agent improper authentication allows unauthenticated remote code executionEPSS 0.2%CVE-2026-115253HIGHWatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log TamperingEPSS 0.1%CVE-2026-6788HIGHUncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard AgentEPSS 0.1%