WatchGuard's AuthPoint Authentication Gateway 7.6.0 fixes four vulnerabilities, including three critical flaws affecting authentication services.

WatchGuardの多要素認証ソリューション「WatchGuard AuthPoint」で利用する一部コンポーネントに複数の脆弱性が明らかとなった。同社は修正版を提供している。 ：Security NEXT

WatchGuardの多要素認証ソリューション「WatchGuard AuthPoint」で利用する一部コンポーネントに複数の脆弱性が明らかとなった。同社は修正版を提供している。 ：Security NEXT

WatchGuard incident on November 6, 2026: We

The MFA gateway does not auto-update. Download the installer from the management UI and confirm every host shows green.

The AuthPoint Gateway that connects to your authentication servers can be fooled by fake security certificates.

A remote person who can reach the AuthPoint Gateway on your network can stop its authentication service and erase its local directory sync settings.

The WatchGuard AuthPoint authentication gateway can be fooled if an attacker records a normal communication between its components and then replays it.

TL;DR WatchGuard released urgent updates for WatchGuard AuthPoint Gateway to fix three critical flaws and one high-risk bug. Consequently, attackers could stop login services, intercept traffic, or fake user sessions. Network teams must update to version 7.6.0 now to block these attacks. Why It Matters WatchGuard AuthPoint Gateway links local user lists to cloud login services. Therefore, flaws in this tool put company access controls at high risk.

An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers.

A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway host to disrupt authentication services and delete the local directory synchronization configuration.

An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session outcomes.

WatchGuardの多要素認証ソリューション「WatchGuard AuthPoint」で利用する一部コンポーネントに複数の脆弱性が明らかとなった。同社は修正版を提供している。 ：Security NEXT

WatchGuardの多要素認証ソリューション「WatchGuard AuthPoint」のコンポーネントに複数の脆弱性が発見されました。クリティカルレベルを含む脆弱性が存在し、同社は修正版を提供しています。

サポートが終わった SonicWall Global Management System（GMS）9.5.2 以前に、ログインなしでファイルが読める欠陥が見つかり、修正は出ない。Cisco UCS Central と WatchGuard AuthPoint は修正版が出た。