WatchGuard warns of four vulnerabilities in AuthPoint Authentication Gateway
VULNERABILITYredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
WatchGuard advisory AV26-1125 (dated 4 November 2026) affects AuthPoint Authentication Gateway prior to 7.6.0. It covers CVE-2026-121637 (improper HMAC validation in the LDAP authentication callback, allowing forged authentication results), CVE-2026-121638 (improper certificate validation enabling man-in-the-middle attacks), CVE-2026-121639 (unauthenticated denial of service) and CVE-2026-121640 (capture-replay enabling unauthorised administrative actions). The advisory gives no CVSS scores. Defenders should upgrade to 7.6.0 or later and review the vendor advisory links.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Update AuthPoint Authentication Gateway to version 7.6.0 or later.
- Review the WatchGuard advisory AV26-1125 for the full details and any further guidance.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Canadian Centre for Cyber Security