PT-2026-126638
CVE-2026-82332
·
Published
2026-10-27
·
Updated
2026-10-27
Description by
CVSS 4.0
5.6
MediumMetricsAV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a specially crafted request and convincing the victim user to accept an MFA push notification.
Found an issue in the description? Have something to add? Feel free to write us 👾