Wednesday 4 November
Global

Your region, kept on this device.

Vulnerability

CVE-2026-121640

An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication services.

CVSS score (v4.0)9.1Critical
Not on CISA KEV list

Am I affected?

Sign in and add the software you use to your watchlist: we check it against every new vulnerability.

Show me how to fix it

Timeline

  1. Published by NVD
  2. Last updated by NVD

Sources: NVD and CISA known exploited vulnerabilities catalogue.