CVE-2026-95676— AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass
Quick assessment
Affected
WatchGuard AuthPoint Authentication Gateway
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-95676
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass
Source: CVE Program / CVE List V5
Vulnerability Description
A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication factors still apply.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
认证机制不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| WatchGuard | AuthPoint Authentication Gateway | 4.2.2 ~ 7.5.1 | - |
|
II. Public POCs for CVE-2026-95676
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-95676
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-95676 (1)
IV. Related Vulnerabilities
Same vendor: WatchGuard
-
CVE-2026-86135
Dimension CSRF Vulnerability in Database Snapshot Creation A -
CVE-2026-78616
Dimension Stored XSS via Trusted CA Certificate Configuratio -
CVE-2026-78498
Dimension Server-Side Request Forgery via Email Server Test -
CVE-2026-78612
Dimension SQL Injection in Scheduled Report -
CVE-2026-78047
Dimension Stored XSS in Scheduled Report Task
Same weakness: CWE-287
-
CVE-2026-75973
Apache Tomcat: Cross-context authentication mix-up with Jaka -
CVE-2026-96445
Keycloak-services: keycloak-services: conditional otp skip-h -
CVE-2026-31377
Apache Doris: Improper Authentication Allows Unauthorized Ac -
CVE-2026-18074
IBM Financial Transaction Manager (FTM) is Impacted by Multi -
CVE-2026-77244
[mcp-atlassian] Authentication bypass in HTTP transport: Atl
V. Comments for CVE-2026-95676
No comments yet