CVE-2026-57907
Last modified
CVE-2026-57907 is a high-severity vulnerability rated 8.5/10 on the CVSS scale. A privilege escalation vulnerability in WatchGuard Endpoint Protection's inter-process communication between the console and the protection service allows a local, low-privileged authenticated user to execute arbitrary code with SYSTEM privileges by injecting code into the trusted console process and issuing privileged commands to the service..
Description
A privilege escalation vulnerability in WatchGuard Endpoint Protection's inter-process communication between the console and the protection service allows a local, low-privileged authenticated user to execute arbitrary code with SYSTEM privileges by injecting code into the trusted console process and issuing privileged commands to the service.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| WatchGuard | Endpoint Security | < 8.00.26.0011 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-57907?
How severe is CVE-2026-57907?
How do I fix CVE-2026-57907?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-57894Repository Migration Follows Git HTTP Redirects After URL Al…8.5
- CVE-2026-57895Incorrect default permissions issue exists in Pupsman versio…8.5
- CVE-2026-57896An out-of-bounds read vulnerability in the Productivity Suit…6.1
- CVE-2026-57897Cross-Repo Information Disclosure via Org-Level Actions Run/…6.5
- CVE-2026-57898In Eclipse BaSyx Java Server SDK versions 2.0.0-milestone-05…9
- CVE-2026-5790Stored Cross-Site Scripting (XSS) in Stel Order v3.25.1 and …5.1
- CVE-2026-57909A path traversal vulnerability in WatchGuard Agent allows a …9.4
- CVE-2026-5791Cross-Site request forgery (CSRF) vulnerability in DivvyDriv…6.5
- CVE-2026-57910Improper authentication in the WatchGuard Agent allows an un…9.3
- CVE-2026-57912Johnson & Johnson Campus Recruiting before 2025-10-31 allows…7.5
- CVE-2026-57913Johnson & Johnson Audit Tracking Management System (ATMS) be…7.5
- CVE-2026-57914By sending a deeply nested ASN1 structure to a Apache Kerby …6.5
Are you affected by CVE-2026-57907?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST