CVE-2026-41288

HIGH

7.8

Descripcion

Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to elevate their privileges to NT AUTHORITY\\SYSTEM.

Detalles CVE

Puntuacion CVSS v3.17.8

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioNONE

Publicado5/6/2026

Ultima modificacion5/11/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

watchguard:agent

Debilidades (CWE)

CWE-732

Referencias

https://www.watchguard.com/wgrd-psirt/advisory/WGSA-2026-00011(5d1c2695-1a31-4499-88ae-e847036fd7e3)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.