Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.2
CVE-2026-121639: WatchGuard AuthPoint Gateway can be disabled by unauthenticated user
CVE-2026-121639 · published today
Summary
A remote person who can reach the AuthPoint Gateway on your network can stop its authentication service and erase its local directory sync settings. This would prevent users from logging in through the gateway until the issue is fixed. Apply the vendor’s update as soon as possible and restrict network access to the gateway to trusted hosts only.
What to do
- Update watchguard authpoint authentication gateway to version 7.6.0 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| watchguard | authpoint authentication gateway | < 7.6.0 |
Original advisory text
WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service
A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway host to disrupt authentication services and delete the local directory synchronization configuration.
References
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-252Unchecked Return Value
CWE-287Improper Authentication
CWE-306Missing Authentication for Critical Function
Timeline
Published4 Nov 2026
Updated4 Nov 2026
First seen4 Nov 2026
Track software like this
Free during beta