CVE-2026-13043
A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of kernel and process memory.
- Score
- CVSS 4.0 9.3 Critical
- Status
- Analyzed - 5d1c2695-1a31-4499-88ae-e847036fd7e3
- Published
- 2026-10-01
- Last modified
- 2026-10-16
- Weaknesses
- CWE-306, CWE-798
Affected products
References
- https://psirt.watchguard.com/CVE-2026-13043