Vulnerability · Published Sep 29, 2026 · Assigned by WatchGuard
CVE-2026-86105Fireware OS Improper Authorization in Access Portal Reverse Proxy
Medium 5.3
In plain English
A medium-severity path traversal in Fireware OS from WatchGuard. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Severity (CVSS 4.0)5.3Medium
Exploit odds (30 days)0.3%top 76.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are not authorized for by sending a specially crafted request for a different resource which they are authorized to access.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| WatchGuard | Fireware OS | 2026.3 – before 2026.3.22025.0 – before 2026.2.312.0 – before 12.12.3 |
| WatchGuard | Fireware OS | 12.0 – before 12.5.21 |
Weakness: CWE-176, CWE-22, CWE-285 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
References
- https://psirt.watchguard.com/CVE-2026-86105 vendor-advisory