CVE-2026-86102Suited to automated attack · CISA
WatchGuard AP Command Injection in Internal Management API Allows Command Execution
CVSS score
9.3
EPSS probability
%2.0
Risk score
0.2
Published
17 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.3
CVE-2025-9242 Actively exploited
WatchGuard Firebox iked Out of Bounds Write Vulnerability
W
Workaround Public Exploits:2EPSS %92
9.3
CVE-2025-14733 Actively exploited
WatchGuard Firebox iked Out of Bounds Write Vulnerability
W
WorkaroundEPSS %27
9.3
CVE-2024-6592
WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass
W
Patch status unknownEPSS %1
8.6
CVE-2026-87969
WatchGuard AP Authenticated Command Injection in Diagnostic CLI
W
Patch status unknownEPSS %1
8.6
CVE-2026-3987
WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI
W
Patch status unknown Public Exploits:1EPSS %1
8.6
CVE-2024-5974
Firebox Authenticated Buffer Overflow Vulnerability
W
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-86102"