CVE-2026-57910

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

CVSS

No CVSS.

References

Link	Resource
https://psirt.watchguard.com/CVE-2026-57910

Configurations

No configuration.

History

28 Sep 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Autenticación incorrecta en el Agente de WatchGuard permite a un atacante no autenticado con acceso a la red provocar que el agente ejecute código arbitrario con privilegios elevados.

Information

Published : 2026-08-25 12:16

Updated : 2026-09-28 23:10

NVD link : CVE-2026-57910

Mitre link : CVE-2026-57910

CVE.ORG link : CVE-2026-57910

JSON object : View

Products Affected

No product.

CWE

CWE-306

Missing Authentication for Critical Function

CWE-347

Improper Verification of Cryptographic Signature

CWE-494

Download of Code Without Integrity Check

{"id": "CVE-2026-57910", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-57910", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-25T12:53:05.334812Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "affectedData": [{"vendor": "WatchGuard", "product": "WatchGuard Agent", "versions": [{"status": "affected", "version": "0", "lessThan": "1.17.01.0000", "versionType": "semver"}], "platforms": ["Linux"], "defaultStatus": "unaffected"}, {"vendor": "WatchGuard", "product": "WatchGuard Agent", "versions": [{"status": "affected", "version": "0", "lessThan": "1.25.13.0000", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "WatchGuard", "product": "WatchGuard Agent", "versions": [{"status": "affected", "version": "0", "lessThan": "1.17.21.0000", "versionType": "semver"}], "platforms": ["macOS"], "defaultStatus": "unaffected"}]}], "published": "2026-08-25T12:16:24.773", "references": [{"url": "https://psirt.watchguard.com/CVE-2026-57910", "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "description": [{"lang": "en", "value": "CWE-306"}, {"lang": "en", "value": "CWE-347"}, {"lang": "en", "value": "CWE-494"}]}], "descriptions": [{"lang": "en", "value": "Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges."}, {"lang": "es", "value": "Autenticaci\u00f3n incorrecta en el Agente de WatchGuard permite a un atacante no autenticado con acceso a la red provocar que el agente ejecute c\u00f3digo arbitrario con privilegios elevados."}], "lastModified": "2026-09-28T23:10:00.143", "sourceIdentifier": "5d1c2695-1a31-4499-88ae-e847036fd7e3"}

CVE-2026-57910

JSON object

Attach tags to CVE-2026-57910

Attach tags to `CVE-2026-57910`