PT-2026-102950 · Watchguard · Fireware Os

·

CVE-2026-86101

·

Published

2026-09-29

·

Updated

2026-09-30

CVSS v4.0

7.2

High

VectorAV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N
Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS (affected versions not specified)
Description An improper authorization issue exists in the SAML login process. This allows a remote, authenticated SAML user who only has access to the Access Portal to gain unauthorized Mobile VPN with SSL access by sending a specially crafted request.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Improper Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-86101

Affected Products

Fireware Os