WatchGuard AP firmware before 3.4.8 permits unauthenticated internal-API shell execution.

Install 3.4.8, but do not assume WAN reach or root execution: the listener binding and resulting identity are undisclosed.

Sources

ResearchWatchGuard Security Advisories ResearchCVE-2026-86102 - Vulnerability-Lookup

Copy link

Share this finding

Email Hacker News Reddit Mastodon Bluesky X LinkedIn Facebook Copy link

Read the full daily brief →

Every finding here carries a source that was checked before it published. If something is wrong, write to admin@fullchain.sh — corrections are published on the day they affect.

Tuesday, September 29, 2026