CVE-2026-86102
WatchGuard AP Command Injection in Internal Management API Allows Command Execution
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system.
| CWE | CWE-78 CWE-863 |
| Vendor | watchguard |
| Product | watchguard ap |
| Published | Sep 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for watchguard watchguard ap
Be the first to know when new unknown vulnerabilities affecting watchguard watchguard ap are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
WatchGuard / WatchGuard AP
1.0 < 3.4.8
References
Credits
Yukusawa18