Missing Authentication Vulnerability in WatchGuard AuthPoint Gateway
CVE-2026-121639

9.2CRITICAL

Key Information:

Vendor

Watchguard

Status
AutHPoint Authentication Gateway
Vendor
CVE Published:
4 November 2026

Badges

👾 Exploit Exists

What is CVE-2026-121639?

A flaw in WatchGuard AuthPoint Gateway allows remote unauthenticated attackers with network access to disrupt authentication services. This vulnerability enables attackers to delete critical local directory synchronization configurations, posing a risk to the operational integrity of authentication processes.

Affected Version(s)

AuthPoint Authentication Gateway 1.0 < 7.6.0

References

https://psirt.watchguard.com/CVE-2026-121639
vendor-advisory

CVSS V4

Score:
9.2
Severity:
CRITICAL
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

WatchGuard AI Security Research
.