Watchguard Authpoint Authentication Gateway
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Watchguard Authpoint Authentication Gateway.
By the Year
In 2026 there have been 5 vulnerabilities in Watchguard Authpoint Authentication Gateway with an average score of 8.7 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 5 | 8.74 |
It may take a day or so for new Authpoint Authentication Gateway vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Watchguard Authpoint Authentication Gateway Security Vulnerabilities
Improper Integrity in WatchGuard AuthPoint Gateway LDAP Auth (CVE2026121637)
CVE-2026-121637
8.9 - High
- November 04, 2026
An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session outcomes.
Insufficient Verification of Data Authenticity
WatchGuard AuthPoint GW Improper Cert Validation Enables MITM
CVE-2026-121638
9.1 - Critical
- November 04, 2026
An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers.
Improper Certificate Validation
Unauth RCE: WatchGuard AuthPoint GW DirSync Config Delete
CVE-2026-121639
9.2 - Critical
- November 04, 2026
A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway host to disrupt authentication services and delete the local directory synchronization configuration.
Unchecked Return Value
AuthPoint Gateway Auth Bypass via CaptureReplay
CVE-2026-121640
9.1 - Critical
- November 04, 2026
An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication services.
Authentication Bypass by Capture-replay
AuthPoint Gateway LDAP Sync Auth Bypass (CVE-2026-95676)
CVE-2026-95676
7.4 - High
- September 23, 2026
A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication factors still apply.
authentification
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Watchguard Authpoint Authentication Gateway or by Watchguard? Click the Watch button to subscribe.
