WatchGuard Agent vulnerabilities

2 CVEs affecting WatchGuard Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-57910, published 2026-08-25.

More from WatchGuard.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-57909, published 2026-08-25. Critical severity, CVSS 9.4. EPSS: 0.4% chance of exploitation in the next 30 days. A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system.
• CVE-2026-57910, published 2026-08-25. Critical severity, CVSS 9.3. EPSS: 0.2% chance of exploitation in the next 30 days. Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.