CVE-2026-115253

The record

An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows an attacker to tamper with or destroy the agent's security logs and stage further local attacks by placing executable content in a directory owned by a privileged service.

Affected packages

Related vulnerabilities

• CVE-2026-107052 Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead… CWE-276
• CVE-2026-114148 Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate… CWE-276
• CVE-2026-112357 GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before… CWE-276
• CVE-2026-11813 A potential improper permissions vulnerability was reported in the Lenovo Filez Client… CWE-276
• CVE-2026-52766 YesWiki is a wiki system written in PHP. CWE-276
• CVE-2026-77393 In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped… CWE-276
• CVE-2026-75166 Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05… CWE-276
• CVE-2026-81302 PALLET CONTROL products contain an incorrect default permission vulnerability, which may… CWE-276