Threats
Vulnerabilities and patches
Breaches and privacy
Research
World
Learn
Wednesday 4 November
Global

Your region, kept on this device.

DonateGet the appSign in
Vulnerability

CVE-2026-121638

An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers.

CVSS score (v4.0)9.1Critical
Not on CISA KEV list

Am I affected?

Sign in and add the software you use to your watchlist: we check it against every new vulnerability.

Show me how to fix it

Timeline

  1. Published by NVD
  2. Last updated by NVD

Sources: NVD and CISA known exploited vulnerabilities catalogue.