CVE-2026-92254

6.9 mediumEPSS 0.1%

Medium (6.9). EPSS 0.1% chance of exploitation in the next 30 days.

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driver versions 1.3.0.0 and earlier) on Microsoft Windows allows local, low-privileged attackers to delete arbitrary files with SYSTEM privileges, bypassing NTFS access controls and potentially disabling security products or destabilizing the operating system, via crafted IOCTL requests sent to the \Device\wsdk device.

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/AU:Y/RE:L/U:Amber

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWEs: CWE-20, CWE-306
Published: 2026-09-20
Modified: 2026-09-22
Record from: the NVD, synced 2026-10-19

References

https://watchdog.com/anti-virus-release-notes/
https://watchdog.com/vulnerability-disclosure-policy/

Check your stack JSON