Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-121640 EUVD-2026-116930GHSA-xp5x-55h7-9454

WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions

Published Nov 4, 2026 · Updated Nov 4, 2026 · Assigned by WatchGuard

Description

An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication services.

Affected products

VendorProductAffectedFixed
WatchGuard AuthPoint Authentication Gateway 1.0 – < 7.6.0 7.6.0

References