WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service

Summary

A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway host to disrupt authentication services and delete the local directory synchronization configuration.

Remediation

1. Inventory every WatchGuard AuthPoint Authentication Gateway deployment, including staging.
2. Upgrade WatchGuard AuthPoint Authentication Gateway to 7.6.0.
3. Confirm the running version after the upgrade.

References

• Advisoryhttps://psirt.watchguard.com/CVE-2026-121639