CVE-2026-96293

A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.

Score

CVSS 4.0 6.9 Medium

Status

Awaiting Analysis - 5d1c2695-1a31-4499-88ae-e847036fd7e3

Published

2026-10-22

Last modified

2026-10-23

Weaknesses

CWE-312, CWE-532, CWE-732

Affected products

• Watchguard Agent (Watchguard)

References

• https://psirt.watchguard.com/CVE-2026-96293