Advisoriesby IbisWatchGuard TechnologiesCVE-2026-95676
WatchGuard Technologies AuthPoint Authentication: improper authentication
Fix: upgrade to 7.5.1 or later
A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication factors still apply.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| AuthPoint Authentication Gateway Product | >= 4.2.2, < 7.5.1 | 7.5.1 |