High severity · published Jul 2, 2026
CVE-2026-13079
WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed.
This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MV
Mobile VPN with SSL Client · WatchGuard
12.0 before 2026.2.1 · source: vendor
FI
Fireware · Watchguard
12.0.0 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18 · source: NVD
MV
Mobile Vpn With Ssl · Watchguard
before 2026.2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-13079
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-13079
psirt.watchguard.com
https://psirt.watchguard.com/CVE-2026-13079
Vendor Advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00027
More from Mobile VPN with SSL Client
5.7
CVE-2026-115495
Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket