Live › vulnerability › CVE-2026-96293
Go to dashboardWatchGuard Endpoint Security's Full Disk Encryption feature for macOS writes a diagnostic log file that is readable by all local users. A local unprivileged user or process can read it and obtain a managed computer's FileVault Personal Recovery Key.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Macs managed by WatchGuard Endpoint Security with its Full Disk Encryption feature enabled are exposed, since the flaw is in that feature's diagnostic log. Teams that do not run WatchGuard Endpoint Security on macOS can skip it. Whether the vendor has shipped a patched build is not stated in the sources.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.
This page as .md · .json · in your agent: get_signal("CVE-2026-96293")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.