Serial number: AV26-1125
Date: November 4, 2026
As of November 4, 2026, WatchGuard is affected by vulnerabilities in the following product:
- AuthPoint Authentication Gateway
- Prior to 7.6.0
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
- CVE-2026-121637 — WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results
- CVE-2026-121638 — WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks
- CVE-2026-121639 — WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service
- CVE-2026-121640 — WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions
- WatchGuard Security Advisories