CVE-2026-96293

CVSS 6.9 (medium) ยท published 2026-10-22

A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.

Weakness: CWE-312, CWE-532, CWE-732

Source: NVD CVE-2026-96293

References

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.