Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-115253 1 Watchguard 1 Watchguard Agent 2026-10-22 N/A
An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows an attacker to tamper with or destroy the agent's security logs and stage further local attacks by placing executable content in a directory owned by a privileged service.
CVE-2026-96293 1 Watchguard 1 Watchguard Agent 2026-10-22 N/A
A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.
CVE-2026-57909 1 Watchguard 2 Agent, Watchguard Agent 2026-08-25 N/A
A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system.
CVE-2026-57910 1 Watchguard 2 Agent, Watchguard Agent 2026-08-25 N/A
Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.
CVE-2026-6788 1 Watchguard 3 Agent, Single Watchguard Agent, Watchguard Agent 2026-08-10 7.8 High
Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.
CVE-2026-6787 1 Watchguard 3 Agent, Single Watchguard Agent, Watchguard Agent 2026-08-10 7.8 High
Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.
CVE-2026-41288 1 Watchguard 3 Agent, Single Watchguard Agent, Watchguard Agent 2026-08-10 7.8 High
Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to elevate their privileges to NT AUTHORITY\\SYSTEM.
CVE-2026-41286 1 Watchguard 3 Agent, Single Watchguard Agent, Watchguard Agent 2026-08-10 6.5 Medium
Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same local network could exploit this vulnerability to crash the agent service.
CVE-2026-41287 1 Watchguard 3 Agent, Single Watchguard Agent, Watchguard Agent 2026-08-10 6.5 Medium
Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same local network could exploit this vulnerability to crash the agent service.