CVE-2026-13043 — WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Acc…

CVE-2026-13043

WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access PUBLISHED

Description (CNA)

A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of kernel and process memory.

Affected (CNA)

Vendor / product	Versions
WatchGuard / Endpoint Security	affected 0 before 8.00.26.0012

CWE

CWE-306, CWE-798

References

https://psirt.watchguard.com/CVE-2026-13043

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.