CVE-2026-101891

WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access PUBLISHED

Description (CNA)

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session.

Affected (CNA)

Vendor / product	Versions
WatchGuard / WatchGuard AP	affected 1.0 before 3.4.8

CWE

CWE-284, CWE-923

References

https://psirt.watchguard.com/CVE-2026-101891

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.