{"schema_version":1,"title":"Watchguard AuthPoint Authentication Gateway vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 5 vulnerabilities in Watchguard AuthPoint Authentication Gateway: 0 in the last 7 days and 5 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-121640, was published on 4 November 2026. 4 vulnerabilities in the last four weeks, up 300% on the four before (1).","url":"https://junglewise.ai/threats/technologies/authpoint-authentication-gateway","json_url":"https://junglewise.ai/threats/technologies/authpoint-authentication-gateway.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/authpoint-authentication-gateway","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":0,"all_time":5,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":4,"last_90_days":5,"last_365_days":5},"latest":[{"cve":"CVE-2026-121640","slug":"cve-2026-121640-an-authentication-bypass-by-capture-replay-vulnerability-in","title":"WatchGuard AuthPoint Gateway authentication bypass by capture-replay","severity":"info","exploited":false,"published_at":"2026-11-04T15:17:42.79+00:00","url":"https://junglewise.ai/threats/cve-2026-121640-an-authentication-bypass-by-capture-replay-vulnerability-in"},{"cve":"CVE-2026-121639","slug":"cve-2026-121639-a-missing-authentication-for-critical-function-vulnerability-in","title":"WatchGuard AuthPoint Gateway authentication bypass","severity":"info","exploited":false,"published_at":"2026-11-04T15:17:42.6+00:00","url":"https://junglewise.ai/threats/cve-2026-121639-a-missing-authentication-for-critical-function-vulnerability-in"},{"cve":"CVE-2026-121638","slug":"cve-2026-121638-an-improper-certificate-validation-vulnerability-in-watchguard","title":"WatchGuard AuthPoint Gateway improper certificate validation","severity":"info","exploited":false,"published_at":"2026-11-04T15:17:42.437+00:00","url":"https://junglewise.ai/threats/cve-2026-121638-an-improper-certificate-validation-vulnerability-in-watchguard"},{"cve":"CVE-2026-121637","slug":"cve-2026-121637-an-improper-integrity-validation-vulnerability-in-watchguard","title":"WatchGuard AuthPoint Gateway improper HMAC validation in LDAP authentication","severity":"info","exploited":false,"published_at":"2026-11-04T15:17:42.263+00:00","url":"https://junglewise.ai/threats/cve-2026-121637-an-improper-integrity-validation-vulnerability-in-watchguard"},{"cve":"CVE-2026-95676","epss":0.005,"slug":"cve-2026-95676-a-missing-improper-authentication-vulnerability-in-the-watchguard","title":"WatchGuard AuthPoint Gateway authentication bypass in LDAP Sync","severity":"info","exploited":false,"published_at":"2026-09-23T13:17:32.143+00:00","url":"https://junglewise.ai/threats/cve-2026-95676-a-missing-improper-authentication-vulnerability-in-the-watchguard"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Watchguard Fireware OS","slug":"fireware-os","vulnerabilities":76,"url":"https://junglewise.ai/threats/technologies/fireware-os"},{"name":"Watchguard Dimension","slug":"dimension","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/dimension"},{"name":"Watchguard Agent","slug":"agent","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/agent"},{"name":"Watchguard Firebox","slug":"firebox","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/firebox"},{"name":"Watchguard Fireware","slug":"fireware","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/fireware"},{"name":"Watchguard XTM Appliances","slug":"xtm-appliances","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/xtm-appliances"},{"name":"Watchguard Mobile VPN with SSL client","slug":"mobile-vpn-with-ssl-client","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/mobile-vpn-with-ssl-client"},{"name":"Watchguard XTM","slug":"xtm","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/xtm"}],"technology":{"hub":true,"name":"Watchguard AuthPoint Authentication Gateway","slug":"authpoint-authentication-gateway","vendor":{"hub":true,"name":"Watchguard","slug":"watchguard","url":"https://junglewise.ai/threats/vendors/watchguard"},"aliases":[],"category":"authentication-service","description":"AuthPoint Authentication Gateway is a cloud-based multi-factor authentication and authentication management service.","url":"https://junglewise.ai/threats/technologies/authpoint-authentication-gateway"},"most_severe":[{"cve":"CVE-2026-95676","epss":0.005,"slug":"cve-2026-95676-a-missing-improper-authentication-vulnerability-in-the-watchguard","title":"WatchGuard AuthPoint Gateway authentication bypass in LDAP Sync","severity":"info","exploited":false,"published_at":"2026-09-23T13:17:32.143+00:00","url":"https://junglewise.ai/threats/cve-2026-95676-a-missing-improper-authentication-vulnerability-in-the-watchguard"},{"cve":"CVE-2026-121640","slug":"cve-2026-121640-an-authentication-bypass-by-capture-replay-vulnerability-in","title":"WatchGuard AuthPoint Gateway authentication bypass by capture-replay","severity":"info","exploited":false,"published_at":"2026-11-04T15:17:42.79+00:00","url":"https://junglewise.ai/threats/cve-2026-121640-an-authentication-bypass-by-capture-replay-vulnerability-in"},{"cve":"CVE-2026-121639","slug":"cve-2026-121639-a-missing-authentication-for-critical-function-vulnerability-in","title":"WatchGuard AuthPoint Gateway authentication bypass","severity":"info","exploited":false,"published_at":"2026-11-04T15:17:42.6+00:00","url":"https://junglewise.ai/threats/cve-2026-121639-a-missing-authentication-for-critical-function-vulnerability-in"},{"cve":"CVE-2026-121638","slug":"cve-2026-121638-an-improper-certificate-validation-vulnerability-in-watchguard","title":"WatchGuard AuthPoint Gateway improper certificate validation","severity":"info","exploited":false,"published_at":"2026-11-04T15:17:42.437+00:00","url":"https://junglewise.ai/threats/cve-2026-121638-an-improper-certificate-validation-vulnerability-in-watchguard"},{"cve":"CVE-2026-121637","slug":"cve-2026-121637-an-improper-integrity-validation-vulnerability-in-watchguard","title":"WatchGuard AuthPoint Gateway improper HMAC validation in LDAP authentication","severity":"info","exploited":false,"published_at":"2026-11-04T15:17:42.263+00:00","url":"https://junglewise.ai/threats/cve-2026-121637-an-improper-integrity-validation-vulnerability-in-watchguard"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}