CVE-2026-87969CWE-78command-injection

CVE-2026-87969

published September 28, 2026

CVSS
8.6
EPSS
1%
Percentile
68.0
In the wild
Unconfirmed
What it is

An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying crafted input.

The record
Technical detail
CVSS
8.6 · NONE
CVSS v4.0
8.6 · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01200 · 68.0th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-09-28T21:17Z
References (1)
https://psirt.watchguard.com/CVE-2026-87969 · 5d1c2695-1a31-4499-88ae-e847036fd7e3
EPSS history
Timeline
  • 30 SEP 03:29Z
    EPSS moved — → 1%
    epss
  • 28 SEP 16:51Z
    WatchGuard AP Authenticated Command Injection in Diagnostic CLI
    cvelistv5