CVE-2026-121639
A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows…
- Risk score
- 60/100
- CVSS
- 9.2 v4.0
- Published
- 4 Nov 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway host to disrupt authentication services and delete the local directory synchronization configuration.
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
In the news
TL;DR
WatchGuard releases patches for critical vulnerabilities in AuthPoint Gateway, including CVE-2026-121639, a missing authentication flaw.
- WatchGuard patches four critical authentication issues in AuthPoint Gateway.
- CVE-2026-121639 allows remote unauthenticated attackers to disrupt authentication services.
- No reports of exploitation in the wild, according to WatchGuard.
- Patches available for Fireware OS and WatchGuard AP, but not for Dimension due to lack of patches for Ubuntu version.
AI summary of 1 article.
Why it is Amber
- CVSS 9.2 critical
- Remotely exploitable without logging in
References
Original description
A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway host to disrupt authentication services and delete the local directory synchronization configuration.
Last activity 4 Nov 2026. Patch Forecast updates every hour.