WatchGuard has disclosed two critical vulnerabilities in its Windows-based WatchGuard Agent that could allow unauthenticated attackers to execute arbitrary code on vulnerable endpoints. The flaws, tracked as CVE-2026-57910 and CVE-2026-57909, affect WatchGuard Agent versions earlier than 1.25.13.0000 and carry CVSS v4.0 scores of 9.3 and 9.4, respectively. Both vulnerabilities were published on August 25, 2026. […]
The post Critical WatchGuard Agent Flaws Let Remote Attackers Execute Arbitrary Code appeared first on Cyber Security News.