Veille CVE

Recherche « WatchGuard Agent »

8 CVE

Critique 2 Élevée 4 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « WatchGuard Agent » ✕
  1. CVE-2026-96293 6.9 Moyenne

    WatchGuard Agent

    A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.

  2. CVE-2026-115253 7.3 Élevée

    WatchGuard Agent

    An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows an attacker to tamper with or destroy the agent's security logs and stage further local attacks by placing executable content in a directory owned by a privileged service.

  3. CVE-2026-90441 8.1 Élevée

    WatchGuard Fireware OS · Watchguard fireware

    A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest administrator account) to crash the wgagent process and read arbitrary files accessible to the daemon by submitting a specially crafted management API request.

  4. CVE-2026-86136 8.1 Élevée

    WatchGuard Fireware OS · Watchguard fireware

    A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest administrator account) to crash the wgagent process and read arbitrary files accessible to the daemon by submitting a specially crafted management API request.

  5. CVE-2026-86104 7.5 Élevée

    WatchGuard Fireware OS · Watchguard fireware

    An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a denial of service by sending a specially crafted request.

  6. CVE-2026-13224 4.9 Moyenne

    WatchGuard Fireware OS · Watchguard fireware

    A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a specially crafted management request.

  7. CVE-2026-57910 9.3 Critique

    WatchGuard Agent

    Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

  8. CVE-2026-57909 9.4 Critique

    WatchGuard Agent

    A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system.