CVE-2026-92254CWE-20CWE-306

CVE-2026-92254

published September 20, 2026

CVSS
6.9
EPSS
0%
Percentile
3.1
In the wild
Unconfirmed
What it is

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driver versions 1.3.0.0 and earlier) on Microsoft Windows allows local, low-privileged attackers to delete arbitrary files with SYSTEM privileges, bypassing NTFS access controls and potentially disabling security products or destabilizing the operating system, via crafted IOCTL requests sent to the \Device\wsdk device.

The record
Technical detail
CVSS
6.9 · NONE
CVSS v4.0
6.9 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/AU:Y/RE:L/U:Amber
EPSS
0.00141 · 3.1th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-306 · Missing Authentication for Critical Function
Published
2026-09-20T17:17Z
References (2)
https://watchdog.com/anti-virus-release-notes/ · 34edf4f2-2577-40ab-82ce-39f45972c129https://watchdog.com/vulnerability-disclosure-policy/ · 34edf4f2-2577-40ab-82ce-39f45972c129
EPSS history
Timeline
  • 22 SEP 03:44Z
    EPSS moved — → 0%
    epss
  • 20 SEP 12:02Z
    WatchDog Antivirus kernel driver arbitrary file deletion via unauthenticated IOCTL
    cvelistv5