← nejvýznamnější zprávy · všechny zprávy

poslední zpráva · zachyceno

SPOJENO PŘES CVE EPSS 0.00

WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.3, CVEs: CVE-2026-115253, Summary: An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows an attacker to tamper with or destroy the agent's security logs and stage further local attacks by placing…

Číst originál na NCSC-FI →

2 zprávy z 2 zdrojů · první CZ · EN/orig

WatchGuard FI IT

tg: zranitelnost

CVE v události 1

CVEhodnoceníKEVEPSS
CVE-2026-115253 7.3 4.0 · WatchGuard – 0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 7.3.

Jak se o tom psalo 2

  1. · zachyceno · NCSC-FI FI nadpis události

    WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering

    Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.3, CVEs: CVE-2026-115253, Summary: An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows an attacker to tamper with or destroy the agent's security logs and stage further local attacks by placing…

  2. · CSIRT Itálie (ACN) IT

    Risolte vulnerabilità in prodotti WatchGuard

    Rilasciati aggiornamenti di sicurezza per risolvere due vulnerabilità, di cui una con gravità "alta" in WatchGuard Agent per Windows. Tale vulnerabilità, qualora sfruttata da un utente locale autenticato e privo di privilegi amministrativi, potrebbe consentire la scrittura, la modifica e l'eliminazione non autorizzata di file nella directory dei log.