Known Vulnerabilities for WatchGuard AP by WatchGuard
Listed below are 10 of the newest known vulnerabilities associated with "WatchGuard AP" by "WatchGuard".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115253 json | An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-ad... | Not Provided | 2026-10-22 | 2026-10-23 |
| CVE-2026-101891 json | An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated att... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-96293 json | A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for... | Not Provided | 2026-10-22 | 2026-10-23 |
| CVE-2026-95676 json | A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication a... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-87969 json | An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute ar... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-86135 json | A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remot... | Not Provided | 2026-09-08 | 2026-09-08 |
| CVE-2026-86134 json | A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticate... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-86133 json | An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has completed... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-86132 json | An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated attacke... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-86131 json | A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker wh... | Not Provided | 2026-09-30 | 2026-10-01 |