Our takeWatchGuard advisory AV26-972 covers an improper access control flaw (CVE-2026-101891) in AP firmware versions prior to 3.4.8. Update affected access points immediately.Cyber Resilience desk
Sources (1)
- cccs · cccs
What this means for you — Security leader:Apply the patch to all WatchGuard AP devices running a version prior to 3.4.8.
What this means for you — Lean IT orgs:Update your WatchGuard access points to version 3.4.8 or newer as soon as you can.
What this means for you — MSP:Audit all client WatchGuard AP deployments and patch any running prior to 3.4.8.
What this means for you — Researcher:Review the improper access control details in CVE-2026-101891 and WatchGuard advisory AV26-972.