AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

WatchGuard TechnologiesCVE-2026-57910

WatchGuard Agent: improper authentication

WatchGuard Technologies

CVE-2026-57910 · Published Aug 25, 2026 · updated Sep 28, 2026

Critical9.3
Fix: upgrade to 1.17.01.0000 or later (3 fixed versions below)
WatchGuard Technologies advisory

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

Affected versions

PackageAffectedFixed in
WatchGuard Agent
Product
< 1.17.01.00001.17.01.0000
< 1.25.13.00001.25.13.0000
< 1.17.21.00001.17.21.0000
Details and references
CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-306, CWE-347, CWE-494

More WatchGuard Technologies advisories

All WatchGuard Technologies
High 8.7Aug 28WatchGuard Technologies Fireware OS: out-of-bounds readCVE-2026-19317fixed in 2026.2.2 +3High 8.7Aug 28WatchGuard Technologies Fireware OS: denial of serviceCVE-2026-19316fixed in 2026.2.2 +3Critical 9.3Aug 28WatchGuard Technologies Fireware OS: type confusionCVE-2026-19315fixed in 2026.2.2 +3High 8.7Aug 28WatchGuard Technologies Fireware OS: integer overflowCVE-2026-19314fixed in 2026.2.2 +3Medium 6.9Aug 28WatchGuard Technologies Fireware OS: heap buffer overflowCVE-2026-81851fixed in 2026.2.1 +3Critical 9.4Aug 25WatchGuard Agent: path traversalCVE-2026-57909fixed in 1.25.13.0000