WatchGuard and Cisco have released new security updates. WatchGuard published five advisories, and four of them are critical. Three critical flaws affect WatchGuard AuthPoint, namely the AuthPoint Authentication Gateway. Meanwhile, Cisco fixed a vulnerability in its UCS Central server management system.
What WatchGuard fixed in AuthPoint
WatchGuard AuthPoint is a cloud multi-factor authentication (MFA) platform. The AuthPoint Authentication Gateway connects it to corporate sign-in systems.
Researchers found three critical authentication bugs in the gateway: CVE-2026-121638, CVE-2026-121639 and CVE-2026-121640. In addition, a high-severity flaw, CVE-2026-121637, affects integrity validation. WatchGuard has already fixed all four.
An MFA gateway stands between attackers and corporate accounts. Therefore, an authentication bug can undo all the protection that the second factor provides. For this reason, you should update the gateway as soon as possible.
A Linux kernel flaw in WatchGuard Dimension
The most severe bug is CVE-2026-98432 in the Linux kernel networking code, with a CVSS score of 9.8. It affects WatchGuard Dimension, the monitoring and reporting system for Firebox. Dimension runs on a vulnerable Ubuntu version, and there is no patch yet.
Fireware OS and WatchGuard access points also contain the vulnerable kernel. However, according to the vendor, the attack chain does not work on them.
Until a fix for Dimension is out, limit network access to it. In other words, allow connections only from trusted administrator addresses.
What Cisco fixed in UCS Central
Cisco closed CVE-2026-76506 in UCS Central with a score of 7.6. It allows an authenticated attacker to execute code remotely or access information. So Cisco recommends upgrading to the fixed release.
Neither WatchGuard nor Cisco has seen attacks that use these flaws so far. Also, Cisco scheduled its next bundled publication of advisories for January 20, 2027.
Read also: WatchGuard fixes 18 vulnerabilities in Fireware OS; Cisco releases a critical firewall update; S-byte confirms TPI compliance of RSA ID Plus E3.
How S-byte can help you update WatchGuard AuthPoint and Cisco
S-byte is a WatchGuard and Cisco partner in Ukraine. We will help you close the new flaws without downtime:
- WatchGuard AuthPoint updates. We update Authentication Gateway instances and check your MFA settings.
- WatchGuard Dimension protection. We restrict access to the system until the patch is out and then install it.
- Cisco UCS Central updates. We check versions and install fixes within an agreed maintenance window.
- Technical support with SLA. We follow vendor advisories and install critical updates on time.
- Information security audit. We find out which systems need updates first.
Do you use WatchGuard AuthPoint, Dimension or Cisco UCS? Contact S-byte, and we will update your infrastructure.