CVE-2026-13043 describes a missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) component of WatchGuard endpoint security products. A local attacker with authentication privileges can bypass the driver's access-control handshake, enabling them to send arbitrary privileged commands to the driver. This results in unauthorized disclosure of kernel and process memory. The vulnerability is identified with CWE-306 (Missing Authentication for Critical Function). The CVSS 4.0 vector indicates a critical severity with local attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability.

An authenticated local attacker can bypass access controls in the vulnerable driver to execute privileged commands, leading to disclosure of sensitive kernel and process memory. This compromises system confidentiality and could facilitate further attacks or privilege escalation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict local access to trusted users only and monitor for unusual activity related to the driver.