CVE-2026-121638

LOWCVSS 9.1 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://psirt.watchguard.com/CVE-2026-121638

Weakness type (CWE)

CWE-295

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Referenced assets2 URLs

By indicator

Full discourse2 posts

cve.now@cvedotnow1d
🆕 New CVEs AuthPoint Authentication Gateway: 3 critical CVEs Worst: unauthenticated denial of service in auth gateway (CVE-2026-121639) Patch → 7.6.0 https://cve.now/CVE-2026-121639?release=CVE-2026-121638,CVE-2026-121640&utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=rollup
020431.3K
21.7K followersView on X
Daily CyberSecurity@Daily_CyberSec1d
Update WatchGuard AuthPoint Gateway to version 7.6.0 now to fix CVE-2026-121639, CVE-2026-121638, and two other critical authentication flaws. #WatchGuard #AuthPoint #Cybersecurity #Vulnerability #InfoSec https://securityonline.info/watchguard-authpoint-gateway-flaws-patched/
21021366
13.2K followersView on X

Explore more

Back to dashboard