CVSS 9.3 (critical) · published 2026-09-28
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system.
Weakness: CWE-78, CWE-863
Source: NVD CVE-2026-86102
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.