CVE-2026-86101 – An improper authorization vulnerability in WatchGuard Fireware OS’s SAML login process all

An improper authorization vulnerability in WatchGuard Fireware OS’s SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request.