p PatchFirst

CVE-2026-115253

CVE-2026-115253 · WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows an attacker to tamper with or destroy the agent's security logs and stage further local attacks by placing executable content in a directory owned by a privileged service.

CVSS 7.3 · Élevée · EPSS 0,1% · Correctif disponible

Publication
Mise à jour

Produits et versions concernés

  • watchguard agent

    Versions du logiciel
    • ≥ 0, < 1.25.14.0000: Concernée (semver)

    Mettez à jour vers 1.25.14.0000

Sources originales

Vérifiez votre serveur →