CVE-2026-92254 — WatchDog Antivirus kernel driver arbitrary file deletion via unauthenticated IOCTL

CVE-2026-92254

WatchDog Antivirus kernel driver arbitrary file deletion via unauthenticated IOCTL PUBLISHED

Description (CNA)

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driver versions 1.3.0.0 and earlier) on Microsoft Windows allows local, low-privileged attackers to delete arbitrary files with SYSTEM privileges, bypassing NTFS access controls and potentially disabling security products or destabilizing the operating system, via crafted IOCTL requests sent to the \Device\wsdk device.

Affected (CNA)

Vendor / product	Versions
Watchdog / Anti-Virus	affected 1.8.640 before 1.8.804

CWE

CWE-20, CWE-306

References

https://watchdog.com/vulnerability-disclosure-policy/
https://watchdog.com/anti-virus-release-notes/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.