CVE-2026-41288 | THREATINT

Description

Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to elevate their privileges to NT AUTHORITY\\SYSTEM.

PUBLISHED Reserved 2026-04-20 | Published 2026-05-06 | Updated 2026-05-06 | Assigner WatchGuard

HIGH: 7.3CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-732 Incorrect Permission Assignment for Critical Resource

Product status

Default status

unaffected

Any version before 1.25.03.0000

affected

References

www.watchguard.com/wgrd-psirt/advisory/WGSA-2026-00011

cve.org (CVE-2026-41288)

nvd.nist.gov (CVE-2026-41288)

Download JSON