Cisco and WatchGuard release patches; SonicWall leaves GMS unpatched
SonicWall will not patch two critical flaws in its end-of-life Global Management System.
60
CVE-2026-121639
Missing Authentication for Critical Function in WatchGuard AuthPoint Gateway
- CVSS 4.0
- 9.2 critical
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
WatchGuard AuthPoint Gateway has a missing authentication flaw for critical functions. Remote unauthenticated attackers with network access to the gateway host can disrupt authentication services and delete the local directory synchronization configuration. This affects all users of the AuthPoint Gateway.
What to do: Apply WatchGuard's update for CVE-2026-121639.
| Product | Affected |
|---|---|
| WatchGuard AuthPoint Gateway | — |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway host to disrupt authentication services and delete the local directory synchronization configuration.
- Weakness
- CWE-252, CWE-287, CWE-306
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
In the news
2 storiesWatchGuard AuthPoint Gateway affected by four vulnerabilities
CVEs allow forged LDAP authentication, MITM attacks, unauthenticated DoS, and unauthorized admin actions prior to 7.6.0.
50