Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-121638 EUVD-2026-116931GHSA-97r6-h6fj-p27h

WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks

Published Nov 4, 2026 · Updated Nov 4, 2026 · Assigned by WatchGuard

Description

An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers.

Affected products

VendorProductAffectedFixed
WatchGuard AuthPoint Authentication Gateway 1.0 – < 7.6.0 7.6.0

References