CVSS 9.3 (critical) · published 2026-10-01
A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of kernel and process memory.
Affected products (NVD): watchguard endpoint_security
Fixed in (NVD): 8.00.26.0012
Weakness: CWE-306, CWE-798
Source: NVD CVE-2026-13043
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.