CVE-2026-82332
CVE-2026-82332 · Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a specially crafted request and convincing the victim user to accept an MFA push notification.
CVSS 5.6 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
fireware os
- Versions
- ≥ 2025.1, < 2026.4: Affected (custom)
- ≥ 12.7, < 12.12.4: Affected (custom)
Update to 12.12.4; Update to 2026.4