CVE-2026-82332

An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a specially crafted request and convincing the victim user to accept an MFA push notification.

Score

CVSS 4.0 5.7 Medium

Status

Awaiting Analysis - 5d1c2695-1a31-4499-88ae-e847036fd7e3

Published

2026-10-27

Last modified

2026-10-28

Weaknesses

CWE-287, CWE-346

Affected products

• Fireware Os (Watchguard)

References

• https://psirt.watchguard.com/CVE-2026-82332