WatchGuard Agent Hard-Coded Cryptographic Key Vulnerability Allowing Code Injection on Windows
Vulnerability
A vulnerability in WatchGuard Agent for Windows, prior to version 1.25.03.0000, involves the use of a hard-coded cryptographic key. This vulnerability allows for the inclusion of code in an existing process, potentially leading to unauthorized actions or access.
Impact
Exploitation of this vulnerability could result in local privilege escalation to the SYSTEM level.
Remediation
Users can upgrade to WatchGuard Agent for Windows version 1.25.03.0000 to address this vulnerability.
Added: May 6, 2026, 6:56 PM
Updated: May 6, 2026, 6:56 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
2.9remediation
0.0relevance
7.6threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.