{"affected":[{"defaultStatus":"unaffected","product":"AuthPoint Authentication Gateway","source":"CNA: WatchGuard","vendor":"WatchGuard","versions":[{"lessThan":"7.6.0","status":"affected","version":"1.0","versionType":"semver"}]}],"cveId":"CVE-2026-121639","cwes":["CWE-252","CWE-287","CWE-306"],"description":"A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway host to disrupt authentication services and delete the local directory synchronization configuration.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":9.2,"severity":"critical","source":"CNA: WatchGuard","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:H","version":"4.0"}],"modifiedAt":1793803454573,"publishedAt":1793803454573,"references":[{"source":"CNA: WatchGuard","tags":["vendor-advisory"],"url":"https://psirt.watchguard.com/CVE-2026-121639"}],"remediation":[{"kind":"fix","source":"CNA: WatchGuard","text":"AuthPoint Authentication Gateway 7.6.0"}],"revision":"2c3b237a022add15c0b1d5f0c4a406a771bb3ac17d058f939af4a89d54a2666b","sources":[{"modifiedAt":1793803454573,"name":"CNA: WatchGuard","retrievedAt":1793805019940,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121639"}],"ssvc":null,"status":"published","title":"WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service","updatedAt":1793805019940}