{"id":"CVE-2026-13043","title":"A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary p…","summary":"A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary p…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-306","CWE-798"],"vendor":"watchguard","product":"endpoint_security","affected":["endpoint_security < 8.00.26.0012"],"patched":["endpoint_security 8.00.26.0012"],"published":"2026-10-01","updated":"2026-10-16","sourceUpdated":"2026-10-16T13:43:03.120","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-13043","references":[{"url":"https://psirt.watchguard.com/CVE-2026-13043","label":"5d1c2695-1a31-4499-88ae-e847036fd7e3"}],"tags":["nvd","exploit-available","cve.org"],"epss":0.00149,"epssPercentile":0.04011,"exploits":{"github":1,"githubRepos":["https://github.com/TheMalwareGuardian/CVE-2026-13043"],"checkedAt":"2026-10-27T18:52:45.377Z"},"exploitAvailable":true,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-01T16:31:26.482445Z"},"scores":{"nvd":8.8,"cna":9.3},"ingestedAt":"2026-10-01T18:55:42.360Z","slug":"CVE-2026-13043","body":"## Overview\n\nA missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of kernel and process memory.\n\n## Affected\n\n- `endpoint_security < 8.00.26.0012`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `endpoint_security 8.00.26.0012`","depth":"midnight","depthScore":60,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":230145,"id":"CVE-2026-13043","ts":1793127220110,"field":"cvss","old":"9.3","new":"8.8"},{"seq":230144,"id":"CVE-2026-13043","ts":1793127220110,"field":"severity","old":"critical","new":"high"},{"seq":217941,"id":"CVE-2026-13043","ts":1791453068939,"field":"exploit_available","old":"false","new":"true"}]}