{"id":"CVE-2026-82332","published":"2026-10-27T16:17:31.253","lastModified":"2026-10-27T16:17:31.253","description":"An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a specially crafted request and convincing the victim user to accept an MFA push notification.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-287","CWE-346"],"vendors":[],"products":[],"references":[{"url":"https://psirt.watchguard.com/CVE-2026-82332","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}