Description
An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WatchGuard | WatchGuard AP | 1.0 – < 3.4.8 | 3.4.8 |
References
- https://psirt.watchguard.com/CVE-2026-101891 vendor-advisory