CVE-2026-86102

WatchGuard AP Command Injection in Internal Management API Allows Command Execution PUBLISHED

Description (CNA)

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system.

Affected (CNA)

Vendor / product	Versions
WatchGuard / WatchGuard AP	affected 1.0 before 3.4.8

CWE

CWE-78, CWE-863

References

https://psirt.watchguard.com/CVE-2026-86102

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.