CVE-2026-41287: Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant A

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-06 · updated 2026-10-26
Weakness: CWE-121

Description

Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same local network could exploit this vulnerability to crash the agent service.

Affected products

WatchGuard Agent: before 1.25.03.0000 — fixed in 1.25.03.0000

How to fix

Upgrade to a fixed version: WatchGuard Agent 1.25.03.0000. Check the vendor advisory for mitigations.

References

https://psirt.watchguard.com/CVE-2026-41287
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00010

Get alerted when CVE-2026-41287 or the next vulnerability affects your stack