CVE-2026-121639: WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service
Published Nov 4, 2026
·Updated
A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway host to disrupt authentication services and delete the local directory synchronization configuration.
Event History
Nov 4, 2026
CVE Published
via MITRE·02:44 PM
Data Sourced
via MITRE·02:44 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does an attacker need AuthPoint credentials or user interaction to exploit this issue?
No. The issue can be exploited remotely by an unauthenticated attacker who has network access to the AuthPoint Gateway host; no user interaction is required.
2
What is the likely operational impact of a successful attack?
An attacker can disrupt authentication services and delete the local directory synchronization configuration on the affected AuthPoint Gateway.