CVE-2026-82332
Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a specially crafted request and convincing the victim user to accept an MFA push notification.
| CWE | CWE-287 CWE-346 |
| Vendor | watchguard |
| Product | fireware os |
| Published | Oct 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for watchguard fireware os
Be the first to know when new unknown vulnerabilities affecting watchguard fireware os are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
WatchGuard / Fireware OS
2025.1 < 2026.4 12.7 < 12.12.4
References
Credits
WatchGuard AI Security Research Laurent GAFFIE , secorizon.com