Dashboard / CVE-2026-57907

CVE-2026-57907

HIGH
MEDIUM Priority: 0.01 BB Relevance: 42/100
Published: 2026-11-10 Modified: 2026-11-12 First seen: 2026-11-10 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: High
VI: High
VA: High

Description

A privilege escalation vulnerability in WatchGuard Endpoint Protection's inter-process communication between the console and the protection service allows a local, low-privileged authenticated user to execute arbitrary code with SYSTEM privileges by injecting code into the trusted console process and issuing privileged commands to the service.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
WatchGuard Endpoint Security 0 < 8.00.26.0011
WatchGuard Endpoint Security 0 < 8.00.26.0011

References & Advisories (1)

Bug Bounty Relevance

42 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

8.5 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.13%
Raw Score 0.001310
Percentile 2.7%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00131
2026-11-12
0.00131

Intelligence Sources

mitre ref →
nvd ref →

External Links