CVE-2026-57910 — WatchGuard Agent improper authentication allows unauthenticated remote code execution

CVE-2026-57910

WatchGuard Agent improper authentication allows unauthenticated remote code execution PUBLISHED

Description (CNA)

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

Affected (CNA)

Vendor / product	Versions
WatchGuard / WatchGuard Agent	affected 0 before 1.17.01.0000
WatchGuard / WatchGuard Agent	affected 0 before 1.25.13.0000
WatchGuard / WatchGuard Agent	affected 0 before 1.17.21.0000

CWE

CWE-306, CWE-347, CWE-494

References

https://psirt.watchguard.com/CVE-2026-57910

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.