Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-121640

WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions

An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication services.

CVSS 4.0 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Watchguard
Products
Authpoint Authentication Gateway
CVE-2026-121639

WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service

A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway host to disrupt authentication services and delete the local directory synchronization configuration.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Watchguard
Products
Authpoint Authentication Gateway
CVE-2026-121638

WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks

An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers.

CVSS 4.0 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Watchguard
Products
Authpoint Authentication Gateway
CVE-2026-121637

WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results

An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session outcomes.

CVSS 4.0 · 8.9 High EPSS < 1% KEV · Not listed
Vendors
Watchguard
Products
Authpoint Authentication Gateway
CVE-2026-95676

AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass

A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication factors still apply.

CVSS 4.0 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Watchguard
Products
Authentication Gateway Authpoint Authentication Gateway