CVE-2026-13043 CRITICAL 9.3
Published: 2026-10-01 17:17:21 UTC · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of kernel and process memory.
Weakness: CWE-306, CWE-798
Affected products
cpe:2.3:a:watchguard:endpoint_security:*:*:*:*:*:*:*:*cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*