CVE-2026-82332: Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking
Published Oct 27, 2026
·Updated
An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a specially crafted request and convincing the victim user to accept an MFA push notification.
Affected Software
1 affected component
WatchGuard Fireware OS
Event History
Oct 27, 2026
CVE Published
via MITRE·03:52 PM
Data Sourced
via MITRE·03:52 PM
RemedyDescriptionWeakness
Frequently Asked Questions
1
Who is exposed to this issue?
The attacker must be local to the affected appliance and does not need to authenticate. Exploitation also requires another user to have an MFA session in progress.
2
What must an attacker do to hijack a session?
The attacker supplies a specially crafted request and must convince the victim to approve an MFA push notification. Without the victim accepting that notification, the described attack cannot complete.