CVEvulnerability

CVE-2026-13079

7.3 HIGH Published 2026-07-03 Modified 2026-10-25 Official page ↗
Status
Modified
Published
2026-07-03
Last modified
2026-10-25
Assigner
5d1c2695-1a31-4499-88ae-e847036fd7e3
CVSS 4.0 (5d1c2695-1a31-4499-88ae-e847036fd7e3)
7.3 HIGH — CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-732

Description

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.

Affected configurations

• watchguard mobile vpn with ssl (< 2026.2.1) • watchguard fireware (>= 12.0.0 < 12.12.1) • watchguard fireware (>= 2025.1 < 2026.2.1) • watchguard fireware (>= 12.5 <= 12.5.18)

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References