The vulnerability is an Improper Certificate Validation flaw that allows an attacker with an on‑path network position to intercept and modify traffic between the AuthPoint Gateway and local authentication providers. This flaw permits disclosure, alteration, and potential execution of malicious content in transit, and is classified as CWE‑295, reflecting failures in authenticating communication endpoints. The impact is that any confidential data, authentication credentials, or session tokens could be exposed or tampered with during transit, undermining the integrity and confidentiality of the authentication process.

The flaw affects WatchGuard AuthPoint Authentication Gateway devices. All versions prior to the mitigated release AuthPoint Authentication Gateway 7.6.0 are vulnerable; the vendor’s advisory recommends upgrading to this version or later to eliminate the defect.

The CVSS score is 9.1, indicating high severity. No EPSS score is available, and the vulnerability is not listed in CISA’s KEV catalog. An attacker that can position themselves on the network path to the gateway can exploit the flaw by presenting a forged certificate or by replacing network packets, thereby performing a man‑in‑the‑middle attack. Given the high CVSS and the lack of mitigation in current deployments, the risk to affected organizations is substantial until a patch is applied or an effective workaround is implemented.