How many WatchGuard agent CVEs are in CISA KEV?

None of WatchGuard agent's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of WatchGuard agent are affected?

2 distinct WatchGuard agent versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in WatchGuard agent CVEs?

WatchGuard agent's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-321 (Use of Hard-coded Cryptographic Key), CWE-427 (Uncontrolled Search Path Element), CWE-732 (Incorrect Permission Assignment for Critical Resource).

What is the average severity of WatchGuard agent CVEs?

The average CVSS base score across WatchGuard agent's scored CVEs is 7.7.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

WatchGuard

5 CVEs

WatchGuard agent Vulnerabilities

Name: WatchGuard agent vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for agent by WatchGuard.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.7

Avg CVSS

2026–2026

Last updated May 6, 2026

Overview

WatchGuard agent has 5 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting WatchGuard agent, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of WatchGuard agent's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High5

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of WatchGuard agent's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No WatchGuard agent CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every WatchGuard agent version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.25.03.00005 CVEs

Fixed in

1.25.03.00005 CVEs

Find a version

5 CVEs

Sort

Uncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard Agent
CVE-2026-6788
Patch
CWE-427
High · CVSS 8.5
EPSS 0.1% (2th pct)2026-05-06
Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process
CVE-2026-6787
Patch
CWE-321
High · CVSS 8.5
EPSS 0.1% (1th pct)2026-05-06
Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant B
CVE-2026-41286
Patch
CWE-121
High · CVSS 7.1
EPSS 0.2% (12th pct)2026-05-06
WatchGuard Agent on Windows Privilege Escalation Vulnerability
CVE-2026-41288
Patch
CWE-732
High · CVSS 7.3
EPSS 0.1% (1th pct)2026-05-06
Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant A
CVE-2026-41287
Patch
CWE-121
High · CVSS 7.1
EPSS 0.2% (12th pct)2026-05-06

Common weakness types

The CWE weakness categories most often found in WatchGuard agent CVEs. Follow any weakness for its full explanation.

Other WatchGuard products

Browse vulnerabilities for other products by WatchGuard.

fireware52 CVEs Fireware OS50 CVEs fireboxcloud32 CVEs firebox m27032 CVEs firebox m29032 CVEs firebox m37032 CVEs firebox m39032 CVEs firebox m44032 CVEs

All WatchGuard vulnerabilities

Frequently asked questions

Common questions about WatchGuard agent vulnerabilities.

How many CVEs does WatchGuard agent have?: WatchGuard agent has 5 published CVE records since 2026.
How many WatchGuard agent CVEs are in CISA KEV?: None of WatchGuard agent's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for WatchGuard agent vulnerabilities?: No WatchGuard agent CVEs currently have a tracked public exploit in this dataset.
Which versions of WatchGuard agent are affected?: 2 distinct WatchGuard agent versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in WatchGuard agent CVEs?: WatchGuard agent's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-321 (Use of Hard-coded Cryptographic Key), CWE-427 (Uncontrolled Search Path Element), CWE-732 (Incorrect Permission Assignment for Critical Resource).
What is the average severity of WatchGuard agent CVEs?: The average CVSS base score across WatchGuard agent's scored CVEs is 7.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track WatchGuard agent vulnerabilities

Monitor new WatchGuard agent vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing