CVE-2026-13043: WatchGuard Endpoint Security

Critical severity, CVSS 9.3. EPSS: 0.1% chance of exploitation in the next 30 days.

A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of kernel and process memory.

Affected products

• WatchGuard Endpoint Security: before 8.00.26.0012 (fixed in 8.00.26.0012)

Published 2026-10-01. Last modified 2026-10-02.