WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication services.

Üreticinin çözüm notu (İngilizce)

AuthPoint Authentication Gateway 7.6.0

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• psirt.watchguard.com/CVE-2026-121640 Üretici bülteni

Kayıt geçmişi

1. 4 Kas 2026 17:44Yayımlandı

İlgili açıklar

• 8,9 CVE-2026-121637WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results
• 9,1 CVE-2026-121638WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks
• 9,2 CVE-2026-121639WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service
• 7,6 CVE-2026-11749A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one…
• 6,0 CVE-2026-104381WatchGuard Fireware OS'ta FireCluster durum senkronizasyonunda kimlik doğrulama eksikliği
• 7,5 CVE-2026-41020Eaton easyE4 kimlik doğrulamada statik nonce kullanımı nedeniyle tekrar oynatma (replay) zafiyeti