Cleartext Storage Vulnerability in WatchGuard Endpoint Security for macOS
CVE-2026-96293

6.9MEDIUM

Key Information:

Vendor

Watchguard

Status
Watchguard Agent
Vendor
CVE Published:
22 October 2026

What is CVE-2026-96293?

A vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS permits local, unprivileged users to access sensitive data. This occurs due to the persistent storage of diagnostic log files that remain readable by all local users, allowing the potential exposure of managed computers' FileVault Personal Recovery Key.

Affected Version(s)

WatchGuard Agent macOS 1.17.24.0000

References

https://psirt.watchguard.com/CVE-2026-96293
vendor-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

James Mc
.