This vulnerability (CVE-2026-6787) in WatchGuard Agent on Windows is classified as CWE-321, indicating the use of a hard-coded cryptographic key. Such a flaw can undermine cryptographic protections, enabling unauthorized code inclusion within an existing process. The CVSS 4.0 base score is 8.5, reflecting high impact with local attack vector, low attack complexity, no user interaction required, and high impact on confidentiality, integrity, and availability. The affected versions explicitly include 0 and 1.0.0.0. No vendor remediation level or patch information is currently available.

The vulnerability allows an attacker with local access and limited privileges to include malicious code into an existing process by exploiting the hard-coded cryptographic key. This can lead to significant compromise of system confidentiality, integrity, and availability. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users and monitor for suspicious activity related to the WatchGuard Agent process.