CVE-2026-13079

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.

CVSS 4.0

7.3CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-25)

CWE

CWE-732

Published

2026-07-03

Modified

2026-10-25

Record from

the NVD, synced 2026-10-25

Affected

• watchguard:fireware
• watchguard:mobile_vpn_with_ssl

References

• https://psirt.watchguard.com/CVE-2026-13079
• https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00027

Check your stackJSON