CVE-2026-86101

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated user with limited Access Portal permissions to gain unauthorized access to Mobile VPN with SSL via a specially crafted request. This could lead to unauthorized data access and potential network compromise. Organizations using WatchGuard Fireware OS should prioritize patching this vulnerability to mitigate the risk of exploitation.