CVE-2026-86101

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request.

  • Published Sep 30, 2026
  • CVSS 7.2 high
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-86101 at the National Vulnerability Database