CVE-2026-92254
Received Received - Intake

Missing Authorization in Watchdog WatchDog Antivirus Kernel Driver

Publication date: 2026-09-20

Last updated on: 2026-09-20

Assigner: 34edf4f2-2577-40ab-82ce-39f45972c129

Description
Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driver versions 1.3.0.0 and earlier) on Microsoft Windows allows local, low-privileged attackers to delete arbitrary files with SYSTEM privileges, bypassing NTFS access controls and potentially disabling security products or destabilizing the operating system, via crafted IOCTL requests sent to the \Device\wsdk device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-20
Last Modified
2026-09-20
Generated
2026-09-20
AI Q&A
2026-09-20
EPSS Evaluated
N/A
NVD
CVE-2026-92254
EUVD
EUVD-2026-83737

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
watchdog watchdog_antivirus to 1.3.0.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a missing authorization issue in the IOCTL handlers of the wsdkd.sys kernel driver used by Watchdog WatchDog Antivirus 1.8.640 and earlier versions. Local attackers with low privileges can send crafted IOCTL requests to the \Device\wsdk device to delete arbitrary files with SYSTEM privileges. This bypasses NTFS access controls and could disable security products or destabilize the operating system.

Impact Analysis

An attacker could exploit this to delete critical system files, disable antivirus protection, or crash the operating system. Since it requires only local low-privilege access, any user with basic system access could potentially trigger this vulnerability to cause significant damage.

Mitigation Strategies

Update Watchdog WatchDog Antivirus to the latest version where the vulnerability is patched. If no patch is available, consider uninstalling the software immediately to prevent exploitation. Restrict local user permissions to limit access to vulnerable drivers.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-92254. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart