CVE-2026-121637
Received Received - Intake

Improper Integrity Validation in WatchGuard AuthPoint Gateway LDAP Authentication

Publication date: 2026-11-04

Last updated on: 2026-11-04

Assigner: WatchGuard Technologies, Inc.

Description
An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session outcomes.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-04
Last Modified
2026-11-04
Generated
2026-11-04
AI Q&A
2026-11-04
EPSS Evaluated
N/A
NVD
CVE-2026-121637
EUVD
EUVD-2026-116933

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
WatchGuard AuthPoint Authentication Gateway 1.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-345 The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper integrity validation flaw in WatchGuard AuthPoint Gateway's LDAP authentication callback. It allows a network attacker with a valid header signature to forge authentication results and transaction identifiers in the request body, potentially leading to unauthorized session outcomes.

Detection Guidance

Monitor LDAP authentication callbacks for WatchGuard AuthPoint Gateway versions below 7.6.0. Check for forged transaction identifiers or authentication results in request bodies. WatchGuard PSIRT recommends inspecting logs for unusual session outcomes or unauthorized access attempts.

Impact Analysis

An attacker could exploit this to bypass authentication, gain unauthorized access to systems, or manipulate session outcomes. This could lead to data breaches, unauthorized data access, or other malicious activities depending on the system's configuration.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations using affected versions may face legal and regulatory penalties for failing to protect sensitive data.

Mitigation Strategies

Upgrade WatchGuard AuthPoint Gateway to version 7.6.0 or later immediately. Disable LDAP authentication callbacks if not required. Implement network segmentation to limit exposure of the LDAP callback interface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-121637. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...