Description
A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication factors still apply.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WatchGuard | AuthPoint Authentication Gateway | 4.2.2 – < 7.5.1 | 7.5.1 |
References
- https://psirt.watchguard.com/CVE-2026-95676 vendor-advisory