Critical 9.1

An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an...

CVE-2026-121638 First seen on SecPulse Nov 4, 23:44

Affected packages

Ecosystem	Package	Affected	Fixed
WatchGuard	AuthPoint Authentication Gateway	≥ 1.0, < 7.6.0	7.6.0

Original description The description as published by the source.

An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v4: Critical 9.1; CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Published: Nov 5, 2026
First seen on SecPulse: Nov 4, 23:44
GHSA: GHSA-97r6-h6fj-p27h
CWE: CWE-295

NVD GitHub Advisory

Tags(click for explanation)

CWE

CWE-295

Vendors

Watchguard

All

Authpoint Authentication Gateway

Detection sources

NIST National Vulnerability DatabaseNov 5, 04:17
GitHub Security Advisories (Global)Nov 5, 00:32
CVE.org (CVE Program・cvelistV5)Nov 5, 03:20