Improper Authentication in WatchGuard Fireware OS's Multi-Factor Authentication
CVE-2026-82332

5.6MEDIUM

Key Information:

Vendor

Watchguard

Status
Fireware Os
Vendor
CVE Published:
27 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-82332?

An improper authentication flaw exists in the multi-factor authentication process of WatchGuard Fireware OS's AuthPoint. This vulnerability enables a local, unauthenticated attacker to take control of another user's ongoing MFA session. By sending a specially crafted request, the attacker can manipulate the victim into approving an MFA push notification, compromising the security of their session and potentially leading to unauthorized access.

Affected Version(s)

Fireware OS Default 2025.1 < 2026.4

Fireware OS Default 12.7 < 12.12.4

References

https://psirt.watchguard.com/CVE-2026-82332
vendor-advisory

CVSS V4

Score:
5.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

WatchGuard AI Security Research
Laurent GAFFIE , secorizon.com
.