CVE-2018-10576: An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15.

Security readout for executives and security teams

Certain WatchGuard AP100, AP102, and AP200 access points running firmware before 1.2.9.15 can accept authentication through the web UI using a local system account instead of the intended web-only user. That weakens administrative access control on network infrastructure. Exposure is limited to WatchGuard AP100, AP102, and AP200 devices on firmware earlier than 1.2.9.15, particularly where the native AP web UI is reachable by untrusted users or networks. Prioritize remediation where these access points manage production wireless networks or expose administrative web access. Legacy access points are often overlooked, and compromise could affect network control even without confirmed active exploitation. Mitigation focus: Upgrade affected AP100, AP102, and AP200 firmware to 1.2.9.15 or later.; Review WatchGuard's advisory and support KB for model-specific guidance.; Limit access to the native AP web UI to trusted administrative networks..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.