Advisories · Technology

WatchGuard AuthPoint Authentication Gateway.

Every CVE that names WatchGuard AuthPoint Authentication Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-121637 CVE record

CVSS 8.9 High

WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results
- WatchGuard AuthPoint Authentication Gateway
- CWE-345
Not analysed yet 4 Nov 2026
CVE-2026-121639 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service
- WatchGuard AuthPoint Authentication Gateway
- Authentication bypass
- CWE-252
Not analysed yet 4 Nov 2026
CVE-2026-121638 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks
- WatchGuard AuthPoint Authentication Gateway
- Weak cryptography or TLS
Not analysed yet 4 Nov 2026
CVE-2026-121640 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions
- WatchGuard AuthPoint Authentication Gateway
- Authentication bypass
Not analysed yet 4 Nov 2026
CVE-2026-95676 CVE record

CVSS 7.4 High

AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass
- WatchGuard AuthPoint Authentication Gateway
- Authentication bypass
- CWE-636
Not analysed yet 23 Sept 2026