Vulnerability intelligence
CVE-2026-86102
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system.
CVSS Score
9.3
Critical
EPSS — Exploit Probability
—
Awaiting FIRST.org data · checked 2026-09-29
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Sep 29, 2026 · latest Sep 29, 2026
Coverage timeline
-
WatchGuard Access Points Expose Networks to Critical Command Injectionsecurityonline.info · Sep 29, 2026