[ CVE-2026-95676 · Published 23 Sep 2026 ]

Vulnerability in WatchGuard AuthPoint Authentication Gateway

CVSS 7.5 EPSS <1%Fix available

[ Description ]Official description

A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication factors still apply.

[ Fixes ]Fixes and patches

Patch on psirt.watchguard.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ References ]References

psirt.watchguard.com/CVE-2026-95676PatchVendor Advisory