CVE-2026-82332#

Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking

Medium 5.6 CVSS v4.0 › Published 2026-10-27Updated 2026-10-27

Summary #

An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a specially crafted request and convincing the victim user to accept an MFA push notification.

Product status #

Product	Affected	Not affected
Fireware OS
Default	>= 2025.1, < 2026.4, >= 12.7, < 12.12.4	>= 2026.4, >= 12.12.4

Required Configuration for Exposure #

This vulnerability affects Firebox deployments that are configured with the AuthPoint integration.

Weakness Type and Impact #

CWECWE-287Improper Authentication
CWECWE-346Origin Validation Error
CAPECCAPEC-21Exploitation of Trusted Identifiers
CAPECCAPEC-115Authentication Bypass

Exploitation Status #

WatchGuard is not aware of any exploitation of this vulnerability in the wild.

Solution #

Fireware OS 2026.4, Fireware OS 12.12.4

References #

Credits #

WatchGuard AI Security Researchfinder
Laurent GAFFIE , secorizon.comfinder