CVE-2026-86105
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are not authorized for by sending a specially crafted request for a different resource they are authorized to access.
Risk Assessment
A low-privileged user can access unauthorized web applications, potentially leading to confidentiality and integrity breaches. This may result in privilege escalation within the environment.
Recommendation
Update Fireware OS to the latest version containing the fix. In the meantime, restrict Access Portal access and monitor for unusual resource requests.
Other vulnerabilities in Fireware OS
See all- CVE-2026-81851Medium
A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon (iked), resulting in a denial of service, by saving a specially crafted configuration.
- CVE-2026-3343Medium
A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management user's browser when they click on a specially crafted link.
- CVE-2025-13939Medium
A stored XSS vulnerability in the Gateway Wireless Controller module of WatchGuard Fireware OS allows injection of malicious scripts that execute in the administrator's browser.
Original NVD description (English source)
An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are not authorized for by sending a specially crafted request for a different resource which they are authorized to access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS