Answer in brief
CVE-2026-115253 records a High severity (CVSS 7.3) vulnerability in WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering. The current sources do not mark it as known exploited. The current feed maps WatchGuard/WatchGuard Agent (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.3. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps WatchGuard/WatchGuard Agent (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| WatchGuard/WatchGuard Agentgeneric | >=0 <1.25.14.0000 | 1.25.14.0000 |
Published upstream
Oct 22, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 22, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 22, 2026
An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows an attacker to tamper with or destroy the agent's security logs and stage further local attacks by placing executable content in a directory owned by a privileged service.
Quoted source text, attributed separately from HOL analysis.