EUVD-2026-88364
GHSA-vv6p-f93j-23h8
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessReach AP internal API over network
-
DeliverySend crafted API request with shell metacharacters
-
ExploitTrigger OS command injection (CWE-78)
-
ExecutionExecute arbitrary shell commands on AP OS
-
ImpactFull device compromise (C/I/A)
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization OS command sanitization, avoid shell exec
MITRE ATT&CK
2 techniques across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires network reachability to the WatchGuard AP's internal API service and no authentication (PR:N, UI:N per the vendor CVSS 4.0 vector). The description qualifies the attacker as one 'with network access to the AP,' which is the key limiting factor: an attacker must be able to route to and reach that internal API endpoint - this likely means being on the same network/management segment as the AP rather than arbitrary internet-wide access, so proper network segmentation and restricting management-plane exposure materially reduce realistic risk. No specific non-default configuration or feature toggle is named in the advisory as a precondition. |
| Impact | This is a genuine high-priority issue on multiple independent signals. The vendor (WatchGuard) CVSS 4.0 vector CVSS:4.0/AV:N/AC:L/PR:N/UI:N/VC:H/VI:H/VA:H (9.3, Critical) describes a network-reachable, low-complexity, unauthenticated OS command injection with full high impact to confidentiality, integrity, and availability - the classic profile of an easily automatable, high-technical-impact flaw. No EPSS score, no CISA KEV listing, and no public exploit are present in the supplied data, so exploitation is 'no public exploit identified at time of analysis'; that tempers immediate urgency but does not lower the intrinsic severity, since command injection on an appliance is straightforward to weaponize once details circulate. One point warrants verification: the CVSS vector asserts AV:N (network) yet the description qualifies the attacker as one 'with network access to the AP,' which may imply adjacency/on-network positioning (AV:A) rather than fully remote internet exposure - verify the true reachability of the internal API service with WatchGuard. On balance this is a real priority for WatchGuard AP operators, not a high-CVSS-but-low-real-risk case, but the absence of exploitation evidence suggests it is not yet under active attack. |
| Exploit ScenarioDerived | An attacker positioned on a network segment that can reach the WatchGuard access point sends a crafted request to the AP's internal API service, injecting shell metacharacters into a parameter that is passed to an OS command. With no authentication required (PR:N) and low complexity, the injected command executes on the underlying OS, giving full control of the access point. No public proof-of-concept is identified in the available data. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 28, 2026
Unauthenticated OS command injection in the WatchGuard AP internal API service lets any host that can reach the access point's management-facing API execute arbitrary shell commands on the device's underlying operating system, yielding full compromise of confidentiality, integrity, and availability of the AP itself. Per the vendor-supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N), no credentials or user interaction are required, but exploitation is gated by network reachability - an attacker must be able to route to the internal API endpoint, which in practice points to the same network or management segment as the AP rather than arbitrary internet-wide exposure. No public exploit code has been identified and there is no CISA KEV entry at time of analysis, though the 9.3 severity and the absence of authentication make this a genuine high-priority issue where management-plane exposure exists; no EPSS score was included in the available data. A vendor PSIRT advisory is published at https://psirt.watchguard.com/CVE-2026-86102.
RemediationAI
Check the WatchGuard PSIRT advisory at https://psirt.watchguard.com/CVE-2026-86102 and apply the vendor firmware update for the WatchGuard AP line as soon as it is published - no patch information or fixed version was included in the available intelligence, so the severity and reachability of this issue make advisory monitoring and a scheduled firmware upgrade the primary action once a build is named. Until the device is updated, the decisive control is network reachability, because the vulnerability requires an attacker to be able to route to the AP's internal API service: place AP management interfaces on a dedicated, segmented management VLAN that is not reachable from user, guest, or WLAN client networks, and block inbound access to the AP's management/API ports at the upstream firewall and at any inter-VLAN ACLs (trade-off: this breaks management from general-purpose networks, so administrators must connect through the management segment or a jump host). Where a controller-based architecture is in use, confirm whether the AP API can be reached only from the controller and tighten ACLs accordingly; also disable any remote or cloud management exposure of the AP if it is not operationally required, accepting the loss of off-site administration. For compensating visibility, log and alert on traffic to AP management ports from non-management subnets, since any such connection is by definition anomalous, and treat unexpected shell behavior or process activity on the AP as evidence of exploitation given that command injection typically leaves little forensic residue on embedded devices; rotating any credentials or keys stored on a compromised AP may also be warranted because full OS compromise gives an attacker access to on-device secrets.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The flaw is classified CWE-78 (Improper Neutralization of Special Elements used in an OS Command / OS Command Injection) and lives in the internal API service that ships on WatchGuard Access Points. In this class of defect, input reaching the API - a request parameter, header, path segment, or configuration value - is passed into a shell interpreter (for example via system(), popen(), or an exec call that retains shell parsing) without adequate escaping or allow-listing, so shell metacharacters embedded by the caller are interpreted as commands rather than inert data. Because the vulnerable component is the AP's own internal API service and the CVSS 4.0 vector specifies PR:N and UI:N, the injection path is reachable without authentication and without tricking an operator into an action; the practical constraint is network reachability to that service (AV:N). The affected-product CPE, cpe:2.3:a:watchguard:watchguard_ap:*:*:*:*:*:*:*:*, uses a wildcard version field, indicating the vendor has not enumerated specific model/firmware boundaries in the supplied intelligence - the safe assumption is that the WatchGuard AP line as a whole is in scope until the PSIRT advisory narrows it. Our independent assessment re-scores this as CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, i.e. unauthenticated remote code execution with high impact confined to the AP device (scope unchanged), which aligns with the vendor's 9.3 rather than implying downstream lateral movement by itself. The attack surface is therefore a management/control-plane API that should never be exposed to untrusted networks.
Know when Watchguard gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Unauthenticated (PR:N), low-complexity command injection reachable over the network yields full C/I/A on the AP OS; scope unchanged as impact stays within the same device.
Primary rating from Vendor (WatchGuard).
CVSS VectorVendor: WatchGuard
Lifecycle Timeline
2DescriptionCVE.org
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system.
Executive ViewAI
WatchGuard access points are affected by a critical unauthenticated command injection flaw in their internal management API, allowing any host with network reachability to the AP's management interface to execute arbitrary commands and fully compromise the device. Organizations with these APs deployed in shared or poorly segmented networks face potential wireless service disruption and a risk of attackers using the compromised AP as a pivot point into the broader environment. Although no public exploit code or active exploitation has been observed, the severity and lack of a vendor patch demand immediate risk mitigation.
No vendor-released patch identified at time of analysis. Interim mitigations include restricting network access to the AP management API to trusted management VLANs, disabling the internal API service if not operationally required, enforcing firewall rules to block unauthorized hosts, enabling detailed logging and monitoring for suspicious commands, and deploying network segmentation to isolate APs from critical assets. Refer to the vendor PSIRT advisory for specific configuration guidance.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
OS command injection occurs when an application passes unsanitized user input directly into system shell commands.
More in Watchguard
View allWatchGuard Fireware OS contains an out-of-bounds write in IKEv2 VPN handling enabling unauthenticated remote code execut
Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code
Remote code execution in WatchGuard Fireware OS arises from an out-of-bounds write in the iked (IKE) daemon, letting an
SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitr
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. Rated criti
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Rated critical seve
Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijac
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices w
WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifco
Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a
Panda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering" directory and install
Exploit-DB