CRITICAL 9.3 NVD

CVE-2026-86102

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell comm

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system.

References

https://psirt.watchguard.com/CVE-2026-86102

Published: 2026-09-28 · Source: NVD · Feed updated: 2026-09-29

This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-09-28 via NVD.

Risk Timeline

CVE Disclosed2026-09-28 · 0 days ago

Remediation Resources

Official Advisory

psirt.watchguard.com/CVE-2026-86102

vulnfeed aggregates 13624 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.