CVE-2026-101891

UNKNOWN

Description

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session.

Timeline

Published:September 28th, 2026 5:17 PM

Last modified:September 28th, 2026 8:51 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-284 CWE-923

References & Reports

Advisories, patches, and third-party reports

https://psirt.watchguard.com/CVE-2026-101891

Source: NIST NVD · Data may lag official sources by up to one minute