CVE-2026-57910CWE-306CWE-347CWE-494

CVE-2026-57910

published August 25, 2026

CVSS
9.3
EPSS
0%
Percentile
14.9
In the wild
Unconfirmed
What it is

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

The record
Technical detail
CVSS
9.3 · NONE
CVSS v4.0
9.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00245 · 14.9th percentile
Weaknesses
CWE-306 · Missing Authentication for Critical Function; CWE-347 · Improper Verification of Cryptographic Signature; CWE-494 · Download of Code Without Integrity Check
Published
2026-08-25T16:16Z
References (1)
https://psirt.watchguard.com/CVE-2026-57910 · 5d1c2695-1a31-4499-88ae-e847036fd7e3
EPSS history
Timeline
  • 27 AUG 06:37Z
    EPSS moved — → 0%
    epss
  • 25 AUG 11:47Z
    WatchGuard Agent improper authentication allows unauthenticated remote code execution
    cvelistv5