CVE-2026-101891

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows unauthenticated attackers with network access to gain a valid API session, potentially leading to unauthorized access and manipulation of sensitive configurations. Organizations utilizing WatchGuard Access Points should prioritize this critical vulnerability to mitigate risks of unauthorized network access and potential exploitation. Immediate action is recommended to secure affected devices and prevent potential breaches.