CVE-2026-57907 | BDVDB-2026-403174 Detail
WatchGuardEndpoint Security
Description#
A privilege escalation vulnerability in WatchGuard Endpoint Protection's inter-process communication between the console and the protection service allows a local, low-privileged authenticated user to execute arbitrary code with SYSTEM privileges by injecting code into the trusted console process and issuing privileged commands to the service.
Impact#
Per CVSS v4.0: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-269 Improper Privilege Management
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.