CVE-2026-96293CWE-312CWE-532CWE-732

CVE-2026-96293

published October 22, 2026

CVSS
6.9
EPSS
0%
Percentile
0.0
In the wild
Unconfirmed
What it is

A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.

The record
Technical detail
CVSS
6.9 · NONE
CVSS v4.0
6.9 · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00051 · 0.0th percentile
Weaknesses
CWE-312 · Cleartext Storage of Sensitive Information; CWE-532 · Insertion of Sensitive Information into Log File; CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2026-10-22T13:17Z
References (1)
https://psirt.watchguard.com/CVE-2026-96293 · 5d1c2695-1a31-4499-88ae-e847036fd7e3
EPSS history
Timeline
  • 23 OCT 04:10Z
    EPSS moved — → 0%
    epss
  • 22 OCT 08:38Z
    Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File
    cvelistv5
  • 22 OCT 08:38Z
    Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File
    cvelistv5