Live › vulnerability › CVE-2026-82332
Go to dashboardWatchGuard Fireware OS's AuthPoint MFA process has an improper authentication flaw. A local, unauthenticated attacker on the appliance can hijack another user's in-progress MFA session if the victim accepts a push notification.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:33 UTC. All times on this page are UTC.
Teams running WatchGuard Firebox appliances with Fireware OS and AuthPoint multi-factor authentication. The attacker must be on the appliance itself, and a victim must accept a push prompt, so exposure is limited. Sources do not list affected or fixed Fireware versions.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a specially crafted request and convincing the victim user to accept an MFA push notification.
This page as .md · .json · in your agent: get_signal("CVE-2026-82332")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.