VULNERABILITY INTELLIGENCE
CVE-2026-41288
CVSS score7.8 HIGH
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-05-06
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to elevate their privileges to NT AUTHORITY\\SYSTEM.
Weakness classification
- 5d1c2695-1a31-4499-88ae-e847036fd7e3: CWE-732