What is GHSA-vv6p-f93j-23h8?

GHSA-vv6p-f93j-23h8 is a security advisory published by GitHub Security Advisories with Critical severity. An OS command injection vulnerability in the WatchGuard AP internal API service allows an...

Which CVE IDs does GHSA-vv6p-f93j-23h8 cover?

GHSA-vv6p-f93j-23h8 covers the following CVE IDs: CVE-2026-86102. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-vv6p-f93j-23h8Critical

An OS command injection vulnerability in the WatchGuard AP internal API service allows an...

Vendor

GitHub Security Advisories

Published

September 28, 2026

Last Modified

September 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-86102 →

📋 Description

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-86102
https://psirt.watchguard.com/CVE-2026-86102
https://github.com/advisories/GHSA-vv6p-f93j-23h8