Medium severity · published May 6, 2026
CVE-2026-41287
Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant A
6.5
CVSS
0.3%
EPSS
No
On KEV
Description
Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same local network could exploit this vulnerability to crash the agent service.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
WatchGuard Agent · WatchGuard
1.0.0.0 before 1.25.03.0000 · source: vendor
AG
Agent · Watchguard
before 1.25.03.0000 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-41287
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-41287
psirt.watchguard.com
https://psirt.watchguard.com/CVE-2026-41287
Vendor Advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00010
More from WatchGuard Agent
9.4
CVE-2026-57909
WatchGuard Agent path traversal allows unauthenticated remote code execution
9.3
CVE-2026-57910
WatchGuard Agent improper authentication allows unauthenticated remote code execution
7.8
CVE-2026-6788
Uncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard Agent
7.8
CVE-2026-6787
Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process
7.8
CVE-2026-41288
WatchGuard Agent on Windows Privilege Escalation Vulnerability