PT-2026-136984

CVE-2026-121639

·

Published

2026-11-04

·

Updated

2026-11-04

Description by

CVSS 4.0
9.2
Critical
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:H
WatchGuard AuthPoint Gateway: 3 critical flaws, patch to 7.6.0
CVE-2026-121639 (CVSS 4.0 9.2) lets unauthenticated attackers disrupt authentication on LDAP/AD setups. Two 9.1 CVEs: MitM and replay. No known exploitation per WatchGuard.
https://t.co/Ml1HD2JYKF #WatchGuard #MFA https://t.co/Y2FONINAVq
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-252: Unchecked Return Value
CWE-287: Improper Authentication
CWE-306: Missing Authentication for Critical Function
Related identifiers
CVE-2026-121639
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com