Medium
5.7
An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor...
CVE-2026-82332
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| WatchGuard | Fireware OS |
≥ 2025.1, < 2026.4 ≥ 12.7, < 12.12.4 |
2026.4 12.12.4 |
Original description The description as published by the source.
An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a specially crafted request and convincing the victim user to accept an MFA push notification.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web psirt.watchguard.com
- web nvd.nist.gov
- web github.com