CVE-2026-57909: CWE-306 in WatchGuard WatchGuard Agent
Description
CVE-2026-57909 is a critical path traversal vulnerability in WatchGuard Agent that allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on the affected system. The vulnerability is identified as CWE-306 (Missing Authentication for Critical Function) and CWE-94 (Improper Control of Generation of Code). It has a CVSS 4.0 score of 9.4, indicating high severity with network attack vector and no required privileges or user interaction. No patch or remediation information is provided, and no known exploits are reported in the wild.
CVSS v4.0
Score 9.4critical
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in WatchGuard Agent involves a path traversal flaw that enables remote, unauthenticated attackers on an adjacent network to execute arbitrary code. The weakness stems from missing authentication controls for critical functions (CWE-306) and improper code generation control (CWE-94). The CVSS 4.0 vector indicates the attack can be performed remotely with low complexity and no privileges or user interaction, resulting in high confidentiality, integrity, and availability impacts.
Potential Impact
Successful exploitation allows remote attackers without authentication to execute arbitrary code on the affected system, potentially compromising confidentiality, integrity, and availability. This poses a critical risk to systems running the vulnerable WatchGuard Agent versions.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, restrict network access to the WatchGuard Agent and monitor for suspicious activity on adjacent networks.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-6fjc-c8m9-93pm
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-57909"]
- Database Specific Severity
- CRITICAL
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a8d9ac0acd9273b493e0cf8
Added to database: 08/25/2026, 13:38:08 UTC
Last enriched: 09/29/2026, 05:21:04 UTC
Last updated: 10/07/2026, 18:48:21 UTC
Views: 44
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.