CRITICAL 9.3 NVD

CVE-2026-101891

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session.

References

https://psirt.watchguard.com/CVE-2026-101891

Published: 2026-09-28 · Source: NVD · Feed updated: 2026-09-29

This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-09-28 via NVD.

Risk Timeline

CVE Disclosed2026-09-28 · 0 days ago

Remediation Resources

Official Advisory

psirt.watchguard.com/CVE-2026-101891

vulnfeed aggregates 13624 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.