CVE-2026-57910 : 詳細

CVE-2026-57910

2026-08-25
12h16 +00:00
Authorization problems
A07-Identif. and Authent. FailA02-Cryptographic FailuresA08-Soft and Data Integrity Fail
2026-09-28
23h10 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-306 Missing Authentication for Critical Functionality
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-347 Improper Verification of Cryptographic Signature
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
CWE-494 Download of Code Without Integrity Check
The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

参考資料