CVE-2026-121640 is an authentication bypass vulnerability in WatchGuard AuthPoint Gateway. It allows an attacker who has captured a legitimate request between AuthPoint Gateway components to replay that request and perform unauthorized administrative actions, including disrupting authentication services. The vulnerability has a critical severity score of 9.1.