CVE-2026-101891 — WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access
An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a vali…
Published: 2026-09-28 · CVSS: 9.3 · CVSS 4.0
An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7