WatchGuard product

AP

← All WatchGuard products

No AP CVE is in the CISA KEV catalogue.

Tracked since 29 Sep · latest article Wed 30 Sep · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 0 in the full CISA catalogue · all time
High exploit odds · current: 0; EPSS top 5%, not in KEV
Articles · 7 days: 0; none this week

Exploited, by due date

CSV download

No AP CVE is in the CISA KEV catalogue.

Coverage

2 articles · all timeFull timeline

Two articles so far, 29 Sep to 30 Sep.

1 2

Tue 29 Sep · first reportWatchGuard Access Points Expose Networks to Critical Command InjectionSecurityOnline
Wed 30 SepWatchGuard Patches Critical Firebox Flaw Enabling Root RCESecurityWeek

All CVEs in coverage

CVE-2026-86102WatchGuard AP Command Injection in Internal Management API Allows Command ExecutionCVSS9.3Critical–Not in KEV2.3%EPSS2articles

CVE-2026-87969WatchGuard AP Authenticated Command Injection in Diagnostic CLICVSS8.6High–Not in KEV1.2%EPSS1article

CVE-2026-101891WatchGuard AP Improper Access Control in API Service Allows Unauthenticated AccessCVSS9.3Critical–Not in KEV0.3%EPSS2articles

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

AP

Exploited, by due date

Coverage

All CVEs in coverage

On this device

Intel

Settings

Keyboard shortcuts