WatchGuard Authentication Gateway vulnerabilities

3 CVEs affecting WatchGuard Authentication Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-95676, published 2026-09-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-6592, published 2024-09-25. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on…
CVE-2024-6593, published 2024-09-25. Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days. Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands. An…
CVE-2026-95676, published 2026-09-23. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification…