Skip to content
ThreatCluster

Critical Vulnerabilities in WatchGuard AuthPoint Gateway Require Immediate Attention

First seen 6 Nov 2026, 21:15 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 6, 2026 at 21:16 UTC
  • •Four critical vulnerabilities identified in WatchGuard AuthPoint Gateway.
  • •CVE-2026-121639 has a CVSS score of 9.2, indicating a high risk of exploitation.
  • •Patches have been released, and immediate application is recommended.

WatchGuard has disclosed four critical vulnerabilities in its AuthPoint Authentication Gateway, affecting versions 1.0 to below 7.6.0. The vulnerabilities include CVE-2026-121637 (8.9), CVE-2026-121638 (9.1), CVE-2026-121639 (9.2), and CVE-2026-121640 (9.1). CVE-2026-121637 allows unauthorized session outcomes through improper HMAC validation in LDAP authentication. CVE-2026-121638 enables a Man-in-the-Middle attack due to improper certificate validation. CVE-2026-121639 permits disruption of authentication services by unauthenticated attackers. CVE-2026-121640 allows replay attacks for unauthorized administrative actions. No evidence of exploitation in the wild has been reported, but organizations are urged to apply patches immediately.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 3d ago How this analysis works

Timeline

2026-11-04
CVE disclosures published
WatchGuard disclosed four critical vulnerabilities in AuthPoint Gateway, affecting versions up to 7.6.0.
Ccb.Belgium.Be
2026-11-04
CVE-2026-121638 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-11-04
CVE-2026-121640 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-11-04
CVE-2026-121637 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-11-04
CVE-2026-121639 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-11-06
Patch released
WatchGuard released patches for the vulnerabilities, urging users to update their systems immediately.
Ccb.Belgium.Be

More articles in this cluster (5)

Following this threat?

Track WatchGuard and CVE-2026-121637 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (11)

1 / 3

Common questions

Which versions are affected?
WatchGuard AuthPoint Authentication Gateway versions 1.0 to below 7.6.0 are affected.
Is there evidence of exploitation?
No evidence of these vulnerabilities being exploited in the wild has been reported.
What actions should organizations take?
Organizations should apply the released patches immediately to mitigate risks.