CVE-2026-121638

Vendor

WatchGuard

Product

AuthPoint Authentication Gateway

CVSS v4.0

9.1 AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-295

Exposure class

Identity

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 45
   CVE NVD 2h ago

   An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and…

   An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication…

   CVSS 9.1 CVE-2026-121638 WatchGuard