Improper Integrity Validation in WatchGuard AuthPoint Gateway
CVE-2026-121637

8.9HIGH

Key Information:

Vendor

Watchguard

Status
AutHPoint Authentication Gateway
Vendor
CVE Published:
4 November 2026

Badges

👾 Exploit Exists

What is CVE-2026-121637?

A vulnerability in the WatchGuard AuthPoint Gateway's LDAP authentication callback allows attackers to manipulate authentication results. By obtaining a valid header signature, a network attacker can forge elements of the authentication request, potentially leading to unauthorized access and session hijacking. This vulnerability highlights the importance of ensuring robust integrity validation mechanisms to protect against such exploits.

Affected Version(s)

AuthPoint Authentication Gateway 1.0 < 7.6.0

References

https://psirt.watchguard.com/CVE-2026-121637
vendor-advisory

CVSS V4

Score:
8.9
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

WatchGuard AI Security Research
.