CVE-2026-87969
HighCVSS 8.6Summary
An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying crafted input.
Risk Assessment
An administrator (or someone who has taken over an administrator account) can execute arbitrary commands on the device, potentially leading to full device and network compromise.
Recommendation
Restrict access to the diagnostic CLI, apply vendor patches, and monitor administrator activities.
Other vulnerabilities in WatchGuard AP
See all- CVE-2026-86102Critical
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system.
- CVE-2026-101891Critical
An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session.
Original NVD description (English source)
An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying crafted input.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS