CVE-2026-121640: WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions

Published Nov 4, 2026

Updated

An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication services.

Event History

Nov 4, 2026

CVE Published

via MITRE·02:44 PM

Data Sourced

via MITRE·02:44 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attacker must have observed a legitimate request exchanged between AuthPoint Gateway components. The vulnerability is then exploited by replaying that captured request.

What could an attacker do after successfully replaying a request?

A successful replay can permit unauthorized administrative actions. The described impact includes disrupting authentication services.

CVE-2026-121640: WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What could an attacker do after successfully replaying a request?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What could an attacker do after successfully replaying a request?