CVE-2026-95676 — AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass

CVE-2026-95676

AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass PUBLISHED

Description (CNA)

A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication factors still apply.

Affected (CNA)

Vendor / product	Versions
WatchGuard / AuthPoint Authentication Gateway	affected 4.2.2 before 7.5.1

CWE

CWE-287, CWE-636

References

https://psirt.watchguard.com/CVE-2026-95676

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.