{"id":"CVE-2026-41286","state":"PUBLISHED","title":"Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant B","description":"Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same local network could exploit this vulnerability to crash the agent service.","publishedAt":"2026-05-06T15:46:01.957Z","updatedAt":"2026-08-10T16:52:32.043Z","severity":{"score":7.1,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","source":"WatchGuard"},"assigner":"WatchGuard","products":["WatchGuard WatchGuard Agent"],"affected":[{"vendor":"WatchGuard","product":"WatchGuard Agent","defaultStatus":"unaffected","versions":[{"version":"1.0.0.0","status":"affected","lessThan":"1.25.03.0000","versionType":"semver"}],"platforms":["Windows"]}],"references":["https://psirt.watchguard.com/CVE-2026-41286","https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00011"],"weaknesses":["CWE-121"],"ingestedAt":"2026-10-29T20:11:57.932Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/41xxx/CVE-2026-41286.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-41286","state":"PUBLISHED","datePublished":"2026-05-06T15:46:01.957Z","dateUpdated":"2026-08-10T16:52:32.043Z","assignerShortName":"WatchGuard","assignerOrgId":"5d1c2695-1a31-4499-88ae-e847036fd7e3","dateReserved":"2026-04-20T09:57:56.545Z"},"containers":{"cna":{"title":"Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant B","descriptions":[{"lang":"en","value":"Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same local network could exploit this vulnerability to crash the agent service."}],"affected":[{"vendor":"WatchGuard","product":"WatchGuard Agent","defaultStatus":"unaffected","versions":[{"version":"1.0.0.0","status":"affected","lessThan":"1.25.03.0000","versionType":"semver"}],"platforms":["Windows"]}],"references":[{"url":"https://psirt.watchguard.com/CVE-2026-41286","tags":["vendor-advisory"]},{"url":"https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00011","tags":["vendor-advisory"]}],"metrics":[{"cvssV4_0":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","baseScore":7.1,"baseSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-121","lang":"en","description":"CWE-121","type":"CWE"}]}],"providerMetadata":{"shortName":"WatchGuard","orgId":"5d1c2695-1a31-4499-88ae-e847036fd7e3","dateUpdated":"2026-08-10T16:52:32.043Z"},"cpeApplicability":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:watchguard:watchguard_agent:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0.0","versionEndExcluding":"1.25.03.0000"}]}]}],"solutions":[{"lang":"en","value":"WatchGuard Agent 1.25.03.0000"}],"exploits":[{"lang":"en","value":"WatchGuard is not aware of any exploitation of this vulnerability in the wild."}],"datePublic":"2026-05-06T15:46:01.957Z"},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-06T16:11:17.269036Z","id":"CVE-2026-41286","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-06T16:11:26.423Z"}}]}}}