WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers.

Üreticinin çözüm notu (İngilizce)

AuthPoint Authentication Gateway 7.6.0

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• psirt.watchguard.com/CVE-2026-121638 Üretici bülteni

Kayıt geçmişi

1. 4 Kas 2026 17:44Yayımlandı

İlgili açıklar

• 8,9 CVE-2026-121637WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results
• 9,2 CVE-2026-121639WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service
• 9,1 CVE-2026-121640WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions
• 8,5 CVE-2026-121147Security Misconfiguration Vulnerability in Tata Motors iRA and iRA.ev mobile application
• 7,4 CVE-2026-121565Tanium ürünlerinde sertifika doğrulama hatası (CWE-295)
• 6,8 CVE-2026-121624Nanosystems Supremo before 5.0.2.3874 Improper TLS Certificate Validation