EUVD-2026-65439
GHSA-6fjc-c8m9-93pm
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessGain foothold on adjacent network
-
DeliveryReach unauthenticated WatchGuard Agent service
-
ExploitBypass missing authentication check
-
ExecutionSend path-traversal crafted request
-
PersistWrite or invoke payload outside intended path
-
ImpactExecute arbitrary code on host
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V6 - Authentication Authentication required for critical functions
MITRE ATT&CK
1 technique across 1 tactic: Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires the attacker to be on an adjacent network (CVSS AV:A) - the same local/broadcast or logically adjacent segment as the target - rather than routable across the open internet; this adjacency is the primary limiting factor. Beyond it, no further prerequisites are indicated: the vector is AV:A/AC:L/PR:N/UI:N, meaning no authentication, no user interaction, and low complexity against a host running WatchGuard Agent with its service reachable on that segment. The exposed function needs no credentials due to the missing-authentication weakness (CWE-306), so the realistic gate is purely network reachability to a vulnerable WatchGuard Agent instance on the adjacent network. |
| Impact | Signals are largely aligned toward high priority. The CVSS 4.0 vector (AV:A/AC:L/AT:N/PR:N/UI:N) means low complexity, no privileges, no user interaction, and no special attack requirements, with High impact to confidentiality, integrity, and availability of both the vulnerable system (VC/VI/VA:H) and subsequent systems (SC/SI/SA:H), yielding 9.4 Critical. The single meaningful limiter is attack vector Adjacent (AV:A) rather than Network - the attacker must be on the same logical/physical adjacent segment, not the open internet, which reduces mass-exploitation likelihood versus a true AV:N RCE. No EPSS score, KEV listing, or POC was provided in the input, so exploitation probability cannot be quantified. Overall this reads as a genuine high-priority unauthenticated RCE whose blast radius is bounded by the adjacency requirement - not a high-CVSS-but-low-real-risk issue. |
| Exploit ScenarioDerived | An attacker who gains a foothold on the same adjacent network segment as a managed endpoint (for example via a compromised host, rogue device, or hostile Wi-Fi/VLAN) sends a crafted request to the unauthenticated WatchGuard Agent function and uses path traversal to place or invoke a payload outside the intended directory, executing code on the host. No credentials or user interaction are required (PR:N/UI:N, AC:L), so a single reachable, unpatched agent can be taken over quickly. No public exploit is identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Aug 25, 2026
Remote code execution in WatchGuard Agent lets an unauthenticated attacker positioned on an adjacent network chain a missing-authentication weakness (CWE-306) with path traversal into arbitrary code execution on the host. Rated CVSS 4.0 9.4 (Critical) by WatchGuard, the flaw combines an authentication bypass with directory traversal so no credentials or user interaction are required. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the network-adjacent, no-auth, high-impact profile makes it a high-priority patch item.
RemediationAI
Patch available per vendor advisory - consult the WatchGuard PSIRT advisory at https://psirt.watchguard.com/CVE-2026-57909 for the fixed version and upgrade WatchGuard Agent to it across all endpoints; an exact patched version number is not present in the provided data and should be taken from that advisory rather than assumed. Because the attack vector is Adjacent (AV:A), the most effective compensating control until patching is network segmentation: isolate the segments where WatchGuard Agent listens so untrusted or unmanaged hosts cannot reach the agent's service, and apply host/LAN firewall rules limiting inbound access to the agent's listening port to trusted management systems only (trade-off: an overly narrow allowlist can disrupt legitimate management and telemetry traffic). While remediation is pending, monitor agent hosts for anomalous file writes and unexpected child-process spawns consistent with traversal-to-RCE.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
WatchGuard Agent is the endpoint/host component of WatchGuard's security ecosystem (typically deployed alongside Firebox appliances and Endpoint Security/EPDR management to relay telemetry and enforce policy). The root cause is CWE-306, Missing Authentication for a Critical Function: a function that should require authentication is reachable without it, which the tags label an Authentication Bypass. That exposed function is then abused via path traversal (manipulating '../'-style path components) to write or access files outside the intended directory, and the combination is leveraged into arbitrary code execution. The CPE cpe:2.3:a:watchguard:watchguard_agent:*:*:*:*:*:*:*:* uses a version wildcard, indicating all versions are in scope pending a fixed-version confirmation from the vendor advisory.
Know when Watchguard gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Adjacent unauthenticated RCE, no user interaction (AV:A/AC:L/PR:N/UI:N); scope changed (S:C) since the 4.0 vector shows subsequent-system impact, with full C/I/A loss.
Primary rating from Vendor (WatchGuard).
CVSS VectorVendor: WatchGuard
Lifecycle Timeline
2DescriptionCVE.org
A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system.
Executive ViewAI
WatchGuard Agent contains a critical remote-code-execution vulnerability (CVE-2026-57909, CVSS 9.4) allowing unauthenticated network-adjacent attackers to execute arbitrary commands on affected systems without user interaction. With no vendor patch available and exploitation feasible given the attack profile, this poses immediate risk to any organization deploying WatchGuard Agent across endpoints or infrastructure. Rapid containment and compensating controls are essential to reduce attack surface until a fix is released.
No vendor-released patch identified at time of analysis. Interim mitigations include: (1) network segmentation to restrict adjacent-network communication to WatchGuard Agent hosts; (2) host-based firewalls limiting inbound access to WatchGuard Agent listening ports; (3) enhanced logging and behavioral monitoring of WatchGuard Agent processes for exploitation patterns; (4) air-gapping or isolation of critical systems where operationally feasible; (5) network-based intrusion detection tuned to detect suspicious communications targeting WatchGuard Agent infrastructure.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Path traversal exploits occur when applications use user-controlled input to construct file system paths without proper validation.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
More in Watchguard
View allWatchGuard Fireware OS contains an out-of-bounds write in IKEv2 VPN handling enabling unauthenticated remote code execut
Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code
Remote code execution in WatchGuard Fireware OS arises from an out-of-bounds write in the iked (IKE) daemon, letting an
SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitr
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. Rated criti
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Rated critical seve
Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijac
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices w
WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifco
Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a
Panda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering" directory and install
Exploit-DB