CVE-2026-13043— WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access
Quick assessment
Affected
WatchGuard Endpoint Security
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WatchGuard 终端安全产品所使用的内核内存访问驱动程序（PSKMAD）中存在一个缺失身份验证的漏洞。该漏洞允许经过身份验证的本地攻击者绕过驱动程序的访问控制握手机制，并向驱动程序发送任意特权命令，从而导致内核内存和进程内存泄露。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-13043
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access
Source: CVE Program / CVE List V5
Vulnerability Description
A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of kernel and process memory.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| WatchGuard | Endpoint Security | 0 ~ 8.00.26.0012 | - |
|
II. Public POCs for CVE-2026-13043
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-13043
请登录查看更多情报信息。
Other References for CVE-2026-13043 (1)
-
https://psirt.watchguard.com/CVE-2026-13043 vendor-advisory
IV. Related Vulnerabilities
Same vendor: WatchGuard
-
CVE-2026-86134
Fireware OS Pre-Authentication NULL Pointer Dereference Allo -
CVE-2026-18105
Fireware OS Uncontrolled Resource Consumption in Diagnostic -
CVE-2026-90441
Fireware OS Missing Authorization in wgagent Management API -
CVE-2026-13224
Fireware OS Path Traversal in WebUI Management Agent Allows -
CVE-2026-18145
Fireware OS Stack-based Buffer Overflow in spamd Allows Remo
Same weakness: CWE-306
-
CVE-2026-12423
Foreman: unauthenticated information disclosure via provisio -
CVE-2026-48005
Apache HTTP Server: mod_auth_digest reauthentication attack -
CVE-2026-103244
ground-station before 0.8.0 Authentication Bypass via setup. -
CVE-2026-96577
Oc-mirror__release-4.21: embedded local cache registry liste -
CVE-2026-80276
Comelit 1456B gateway exposes remote configuration password
V. Comments for CVE-2026-13043
No comments yet