CVE-2026-101891Vulnerability
Reported by 4 independent sources · first reported by INCIBE-CERT · last reported
Last reported 19 days ago
higher than 18% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
4 reports, newest first · the exact sentence from each-
⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests“…uthlib), CVE-2026-42542, CVE-2026-44639 (TDengine), CVE-2026-86553, CVE-2026-86555, CVE-2026-86552, CVE-2026-86554 (ZTE SmartLife), CVE-2026-101891, CVE-2026-87969, CVE-2026-86102, CVE-2026-86131 (WatchGuard), GHSA-cpc9-c4h3-2jwx (geoserver/geoserver-cloud), CVE-2026-93302, CVE-2…”
-
WatchGuard Patches Critical Fireware OS Code Injection Vulnerability“Tracked as CVE-2026-101891 and CVE-2026-86102 and affecting internal API services, the critical issues could be exploited to obtain a valid API session without authentication and execute arbitrary shell commands on the underlying OS.”
-
WatchGuard security advisory (AV26-972)“CVE-2026-101891 — WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access”
-
Múltiples vulnerabilidades en WatchGuard AP de WatchGuard“CVE-2026-101891: vulnerabilidad de control de acceso inadecuado en un servicio interno de la API de WatchGuard AP.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-86102, CVE-2026-87969, CVE-2026-86131, CVE-2026-81963, CVE-2026-81578, CVE-2026-82078, CVE-2026-73581, CVE-2026-75973, CVE-2026-76183, CVE-2026-77791, CVE-2026-78383, CVE-2026-78437, CVE-2026-79677, CVE-2026-86248, CVE-2026-86350, CVE-2026-87022, CVE-2026-76708, CVE-2026-76709, CVE-2026-76710, CVE-2026-91765
Thanks — we review every report.