WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks

Summary

An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers.

Remediation

1. Inventory every WatchGuard AuthPoint Authentication Gateway deployment, including staging.
2. Upgrade WatchGuard AuthPoint Authentication Gateway to 7.6.0.
3. Confirm the running version after the upgrade.

References

• Advisoryhttps://psirt.watchguard.com/CVE-2026-121638