diff --git a/NEWS b/NEWS
index 7edc5ee5..36013e5a 100644
--- a/NEWS
+++ b/NEWS
@@ -27,6 +27,7 @@
   * /ca.pem
   * /ca.cer
 - Fix incorrect local address when using PROXY protocol with IPv6 (#711).
+- Fix calculation of avg_auth_time acros sec-mod instances (#736)
 
 
 * Version 1.4.2 (released 2026-04-16)
diff --git a/src/main-ctl-unix.c b/src/main-ctl-unix.c
index 2ade603d..493b2a23 100644
--- a/src/main-ctl-unix.c
+++ b/src/main-ctl-unix.c
@@ -227,7 +227,7 @@ static void method_status(method_ctx *ctx, int cfd, uint8_t *msg,
 		rep.max_auth_time =
 			MAX(rep.max_auth_time,
 			    ctx->s->sec_mod_instances[i].max_auth_time);
-		rep.avg_auth_time = ctx->s->sec_mod_instances[i].avg_auth_time;
+		rep.avg_auth_time += ctx->s->sec_mod_instances[i].avg_auth_time;
 	}
 	if (ctx->s->sec_mod_instance_count != 0) {
 		rep.avg_auth_time /= ctx->s->sec_mod_instance_count;