Authentication Gateway vulnerabilities

3 known vulnerabilities in Authentication Gateway from WatchGuard. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  AuthPoint Authentication Gateway: Improper Authentication

  CVE-2026-95676Sep 23, 2026WatchGuard

  A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication

• 9.1 Critical severity

  SSO Agent: Incorrect Authorization

  CVE-2024-6593Sep 25, 2024WatchGuard

  Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands. An attacker that has already gained network access could exploit

• 9.1 Critical severity

  SSO Client: Incorrect Authorization

  CVE-2024-6592Sep 25, 2024WatchGuardEPSS 1.17%

  An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to f