CVE-2026-13043

A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of kernel and process memory.

Score
CVSS 4.0 9.3 Critical
Status
Analyzed - 5d1c2695-1a31-4499-88ae-e847036fd7e3
Published
2026-10-01
Last modified
2026-10-16
Weaknesses
CWE-306, CWE-798

Affected products

References