Critical Vulnerabilities in WatchGuard AuthPoint Authentication Gateway

CVE v události 4

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.2.

Jak se o tom psalo 2

1. 5. 11. 2026 · zachyceno 04:30 · NCSC-FI FI nadpis události

   Critical Vulnerabilities in WatchGuard AuthPoint Authentication Gateway

   Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.2, CVEs: CVE-2026-121637, CVE-2026-121638, CVE-2026-121639, CVE-2026-121640, Summary: CVE-2026-121637 (CVSS: 8.9): An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized…

2. 4. 11. 2026 20:39 · Cyber Centre Kanada CA

   WatchGuard security advisory (AV26-1125)

   Serial number: AV26-1125 Date: November 4, 2026 As of November 4, 2026, WatchGuard is affected by vulnerabilities in the following product: AuthPoint Authentication Gateway Prior to 7.6.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CVE-2026-121637 — WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results CVE-2026-121638 —…