CVE-2026-57910: WatchGuard Agent improper authentication allows unauthenticated remote code execution

Published Aug 25, 2026

Updated

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

Affected Software

1 affected component

WatchGuard WatchGuard Agent

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WatchGuard Agent to a version that resolves this vulnerability.
Fixed in 1.17.02.0000
Upgrade
Upgrade WatchGuard Agent to a version that resolves this vulnerability.
Fixed in 1.17.21.0000
Upgrade
Upgrade WatchGuard Agent to a version that resolves this vulnerability.
Fixed in 1.25.13.0000

Event History

Aug 25, 2026

CVE Published

via MITRE·11:47 AM

Data Sourced

via MITRE·11:47 AM

RemedyDescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

An unauthenticated attacker with network access to a vulnerable WatchGuard Agent can exploit it. No prior authentication is required.

What level of access could exploitation provide?

The agent may be induced to execute arbitrary code with elevated privileges, which could give an attacker high-level control of the affected system.