authpoint_authentication_gateway vulnerabilities
CVEs whose affected-version data names the authpoint_authentication_gateway package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-121638Critical· 9.1WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks
An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers.
CVE-2026-121640Critical· 9.1WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions
An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative a…
CVE-2026-121639Critical· 9.2WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service
A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway host to disrupt authentication services and delete the loc…
CVE-2026-121637High· 8.9WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results
An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifi…