WatchGuard fixes four AuthPoint Gateway flaws, including unauthenticated disruption of MFA and replayable admin requests; upgrade to 7.6.0
What to do: upgrade AuthPoint Gateway to 7.6.0 or later. Keep the gateway host reachable only from the systems that need it, since the worst flaw needs only network access and would knock out MFA for anything relying on it. Make sure you have a tested break-glass sign-in path if the gateway goes down.
Sources: WatchGuard PSIRT: CVE-2026-121639 · NVD: CVE-2026-121639 · Canadian Centre for Cyber Security: WatchGuard security advisory (AV26-1125) · SecurityWeek: Cisco, WatchGuard Release Patches; SonicWall Won't Fix GMS Flaws (Nov 5)