CVE-2026-101891
2026-09-28
17h17 +00:00
17h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Access Control The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
||
| Improper Restriction of Communication Channel to Intended Endpoints The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint. |
