PT-2026-99942 · Watchguard · Watchguard Ap

·

CVE-2026-86102

·

Published

2026-09-28

·

Updated

2026-09-29

CVSS v4.0

9.3

Critical

VectorAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions WatchGuard AP (affected versions not specified)
Description An OS command injection flaw exists in the internal API service. This issue allows an attacker with network access to the access point to execute arbitrary shell commands on the underlying operating system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Incorrect Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-86102

Affected Products

Watchguard Ap