CVE-2026-87969— WatchGuard AP Authenticated Command Injection in Diagnostic CLI
Quick assessment
Affected
WatchGuard WatchGuard AP
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WatchGuard AP诊断CLI中存在操作系统命令注入漏洞，允许经过身份验证的管理员通过提供精心构造的输入来执行任意操作系统命令。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-87969
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WatchGuard AP Authenticated Command Injection in Diagnostic CLI
Source: CVE Program / CVE List V5
Vulnerability Description
An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying crafted input.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| WatchGuard | WatchGuard AP | 1.0 ~ 3.4.8 | - |
|
II. Public POCs for CVE-2026-87969
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-87969
请登录查看更多情报信息。
Other References for CVE-2026-87969 (1)
-
https://psirt.watchguard.com/CVE-2026-87969 vendor-advisory
Same Patch Batch · WatchGuard · 2026-09-28 · 3 CVEs total
| CVE-2026-101891 | 9.3 CRITICAL | WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access |
| CVE-2026-86102 | 9.3 CRITICAL | WatchGuard AP Command Injection in Internal Management API Allows Command Execution |
IV. Related Vulnerabilities
Same vendor: WatchGuard
-
CVE-2026-86102
WatchGuard AP Command Injection in Internal Management API A -
CVE-2026-101891
WatchGuard AP Improper Access Control in API Service Allows -
CVE-2026-95676
AuthPoint Gateway Improper Authentication in LDAP Sync Allow -
CVE-2026-86135
Dimension CSRF Vulnerability in Database Snapshot Creation A -
CVE-2026-78498
Dimension Server-Side Request Forgery via Email Server Test
Same weakness: CWE-78
-
CVE-2026-86102
WatchGuard AP Command Injection in Internal Management API A -
CVE-2026-101076
Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command -
CVE-2026-101075
Netcore NR289-GE Location Time location_time.cgi system os c -
CVE-2026-4556
macOS Exam4 Local Privilege Escalation via Command Injection -
CVE-2026-101072
Netcore NR289-GE CGI ap_ip.cgi system os command injection
V. Comments for CVE-2026-87969
No comments yet