Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2026-82332

Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WatchGuard

Description

An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a specially crafted request and convincing the victim user to accept an MFA push notification.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WatchGuard Fireware OS

Default version status: unaffected

  • 2025.1 to < 2026.4affected
  • 12.7 to < 12.12.4affected

References