{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/authpoint-authentication-gateway--7.6.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:watchguard:authpoint_authentication_gateway:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-121637"},{"id":"CVE-2026-121638"},{"id":"CVE-2026-121639"},{"id":"CVE-2026-121640"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["AuthPoint Authentication Gateway (\u003c 7.6.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["WatchGuard"],"content_html":"\u003cp\u003eWatchGuard has released security advisories regarding multiple vulnerabilities affecting the AuthPoint Authentication Gateway. Versions prior to 7.6.0 are vulnerable to flaws that could allow attackers to forge authentication results, conduct man-in-the-middle attacks, trigger denial of service, or perform unauthorized administrative actions. As of November 4, 2026, administrators are advised to update to version 7.6.0 or later to mitigate these risks.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-121637: Potential authentication bypass or identity spoofing via HMAC validation failure in LDAP callbacks.\u003c/li\u003e\n\u003cli\u003eCVE-2026-121638: Man-in-the-middle (MitM) risk due to improper certificate validation.\u003c/li\u003e\n\u003cli\u003eCVE-2026-121639: Unauthenticated denial of service (DoS) via improper authentication handling.\u003c/li\u003e\n\u003cli\u003eCVE-2026-121640: Unauthorized administrative control possible through capture-replay of administrative traffic.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade all instances of AuthPoint Authentication Gateway to version 7.6.0 or later immediately.\u003c/li\u003e\n\u003cli\u003eReview administrative access logs for anomalous capture-replay signatures or unauthorized administrative configuration changes until patches are applied.\u003c/li\u003e\n\u003cli\u003eRestrict network access to the AuthPoint Authentication Gateway management interface to trusted administrative segments to reduce the attack surface for DoS and MitM vectors.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-04T22:03:20Z","date_published":"2026-11-04T22:03:20Z","id":"https://feed.craftedsignal.io/briefs/2026-11-watchguard-authpoint-vulnerabilities/","summary":"WatchGuard disclosed four vulnerabilities in AuthPoint Authentication Gateway versions prior to 7.6.0, including flaws enabling forged authentication, man-in-the-middle attacks, denial of service, and unauthorized administrative actions.","title":"WatchGuard AuthPoint Authentication Gateway multiple vulnerabilities (CVE-2026-121637, CVE-2026-121638, CVE-2026-121639, CVE-2026-121640)","url":"https://feed.craftedsignal.io/briefs/2026-11-watchguard-authpoint-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - AuthPoint Authentication Gateway (\u003c 7.6.0)","version":"https://jsonfeed.org/version/1.1"}