CVE-2026-92254

Medium

Description

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driver versions 1.3.0.0 and earlier) on Microsoft Windows allows local, low-privileged attackers to delete arbitrary files with SYSTEM privileges, bypassing NTFS access controls and potentially disabling security products or destabilizing the operating system, via crafted IOCTL requests sent to the \Device\wsdk device.

SeverityMedium

CVSS6.9

Exploit probability—

ProductAnti-Virus

PublishedSep 20, 2026

First seenSep 20, 2026

Weakness typeCWE-20Improper input validation CWE-306Missing authentication for critical function

How to fix

Update

Watchdog Anti-Virus1.8.804 or later

Affected products

Product	Affected versions	Fixed in
Watchdog Anti-Virus	1.8.640 ≤ v < 1.8.804	1.8.804

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.