CVE-2026-121637High· 8.9▾ TwilightAn improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifi…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 49 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session outcomes.
authpoint_authentication_gateway >= 1.0 < 7.6.0AuthPoint Authentication Gateway 7.6.0
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-121638Critical· 9.1WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks
CVE-2026-121640Critical· 9.1WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions
CVE-2026-121639Critical· 9.2WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service
CVE-2026-104381Medium· 6.0Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service
CVE-2026-115495Medium· 5.7Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket
CVE-2026-90465High· 8.7Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation