WATCHGUARD has patched two critical vulnerabilities in its WatchGuard Agent for Windows, specifically CVE-2026-57909 and CVE-2026-57910, both allowing unauthenticated remote code execution with high severity scores of 9.4 and 9.3 respectively. These vulnerabilities enable complete system compromise, requiring no credentials from attackers. While no exploitation has been confirmed in the wild, affected users are urged to upgrade to version 1.25.13.0000 immediately to mitigate risks. Meanwhile, users should limit network access to agent hosts until patched.
WatchGuard Fixes Critical RCE Flaws in Windows Agent
CyberSIXT Evidence Panel
Article by CyberSIXT