WatchGuard Endpoint Security vulnerabilities

2 CVEs affecting WatchGuard Endpoint Security, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-13043, published 2026-10-01.

More from WatchGuard.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-8424, published 2024-11-08. High severity, CVSS 8.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions.
• CVE-2026-13043, published 2026-10-01. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's…