Critical (9.8) in watchguard. EPSS 8.4% chance of exploitation in the next 30 days.
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Hardcoded credentials exist for an unprivileged SSH account with a shell of /bin/false.
Severity
CVSS 3.0
9.8 critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
8.4% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)