CVE-2026-121637
WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session outcomes.
| CWE | CWE-345 |
| Vendor | watchguard |
| Product | authpoint authentication gateway |
| Published | Nov 4, 2026 |
| Last Updated | Nov 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for watchguard authpoint authentication gateway
Be the first to know when new unknown vulnerabilities affecting watchguard authpoint authentication gateway are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
WatchGuard / AuthPoint Authentication Gateway
1.0 < 7.6.0
References
Credits
WatchGuard AI Security Research