CVE-2026-86102

An OS command injection vulnerability in the WatchGuard AP internal API service allows attackers with network access to execute arbitrary shell commands on the underlying operating system. This critical flaw poses a significant risk, potentially leading to unauthorized access and control over affected devices. Organizations using WatchGuard access points should prioritize immediate remediation to mitigate the risk of exploitation.