CVE-2026-121640#

WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions

Critical 9.1 CVSS v4.0 › Published 2026-11-04Updated 2026-11-04

Summary #

An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication services.

Product status #

Product	Affected	Not affected
AuthPoint Authentication Gateway	>= 1.0, < 7.6.0	>= 7.6.0

Weakness Type and Impact #

CWECWE-294Authentication Bypass by Capture-replay
CAPECCAPEC-60Reusing Session IDs (aka Session Replay)

Exploitation Status #

WatchGuard is not aware of any exploitation of this vulnerability in the wild.

Solution #

AuthPoint Authentication Gateway 7.6.0

References #

Credits #

WatchGuard AI Security Researchfinder