← Database

CVE-2026-57907

N/A CVSS: N/A Published: 2026-11-10 Modified: 2026-11-10

Description

A privilege escalation vulnerability in WatchGuard Endpoint Protection's inter-process communication between the console and the protection service allows a local, low-privileged authenticated user to execute arbitrary code with SYSTEM privileges by injecting code into the trusted console process and issuing privileged commands to the service.

Affected Platforms

Unknown

Weakness Type

CWE-269

References