Vulnerability Details CVE-2026-13043
A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of kernel and process memory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 2.0%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2026-13043
-
cpe:2.3:a:watchguard:endpoint_security:*
-
cpe:2.3:o:microsoft:windows:-