<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnFeed.org: WatchGuard AuthPoint Authentication Gateway</title><link>https://vulnfeed.org/</link><description>Every disclosure, as it lands. Critical-only feed available.</description><language>en</language><atom:link href="https://vulnfeed.org/feed/product/watchguard-authpoint-authentication-gateway.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-121637: WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results</title><link>https://vulnfeed.org/cve/CVE-2026-121637/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-121637/</guid><pubDate>Wed, 04 Nov 2026 14:44:14 +0000</pubDate><description>An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway&apos;s LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session outcomes.</description></item><item><title>CVE-2026-121638: WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks</title><link>https://vulnfeed.org/cve/CVE-2026-121638/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-121638/</guid><pubDate>Wed, 04 Nov 2026 14:44:14 +0000</pubDate><description>An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers.</description></item><item><title>CVE-2026-121639: WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service</title><link>https://vulnfeed.org/cve/CVE-2026-121639/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-121639/</guid><pubDate>Wed, 04 Nov 2026 14:44:14 +0000</pubDate><description>A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway host to disrupt authentication services and delete the local directory synchronization configuration.</description></item><item><title>CVE-2026-121640: WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions</title><link>https://vulnfeed.org/cve/CVE-2026-121640/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-121640/</guid><pubDate>Wed, 04 Nov 2026 14:44:14 +0000</pubDate><description>An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication services.</description></item></channel></rss>
