PT-2026-136982
CVE-2026-121637
·
Published
2026-11-04
·
Updated
2026-11-04
Description by
CVSS 4.0
8.9
HighMetricsAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N
An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session outcomes.
Found an issue in the description? Have something to add? Feel free to write us 👾