Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.1
CVE-2026-121640: WatchGuard AuthPoint Gateway can be tricked into admin actions
CVE-2026-121640 · published today
Summary
The WatchGuard AuthPoint authentication gateway can be fooled if an attacker records a normal communication between its components and then replays it. This lets the attacker perform administrative tasks they shouldn’t be able to, such as disrupting login services. Apply the latest updates from WatchGuard, ensure communications are secured, and monitor for unusual administrative activity.
What to do
- Update watchguard authpoint authentication gateway to version 7.6.0 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| watchguard | authpoint authentication gateway | < 7.6.0 |
Original advisory text
WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions
An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication services.
References
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-294Authentication Bypass by Capture-replay
Timeline
Published4 Nov 2026
Updated4 Nov 2026
First seen4 Nov 2026
Track software like this
Free during beta