CVE-2026-13079

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.

Score

CVSS 3.1 7.8 High

Status

Modified - 5d1c2695-1a31-4499-88ae-e847036fd7e3

Published

2026-07-02

Last modified

2026-10-25

Weaknesses

CWE-732

Affected products

• Fireware (Watchguard)
• Mobile Vpn With Ssl (Watchguard)
• Mobile Vpn With Ssl Client (Watchguard)

References

• https://psirt.watchguard.com/CVE-2026-13079
• https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00027