WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions

Summary

An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication services.

Remediation

1. Inventory every WatchGuard AuthPoint Authentication Gateway deployment, including staging.
2. Upgrade WatchGuard AuthPoint Authentication Gateway to 7.6.0.
3. Confirm the running version after the upgrade.

References

• Advisoryhttps://psirt.watchguard.com/CVE-2026-121640