7.3Hoch
CVE-2026-13079WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation
Beschreibung
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.
Schwachstellentyp (CWE):
CWE-732
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| watchguard | fireware | 12.0.0 – < 12.12.1 | |
| watchguard | mobile vpn with ssl | < 2026.2.1 | |
| WatchGuard | Mobile VPN with SSL Client | 12.0 – < 2026.2.1 |
Referenzen und Patches
- https://psirt.watchguard.com/CVE-2026-13079 vendor-advisory
- https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00027 vendor-advisoryVendor Advisory
CPE-Treffer (NVD) (4)
cpe:2.3:a:watchguard:mobile_vpn_with_ssl:*:*:*:*:*:windows:*:*< 2026.2.1cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 12.0.0 < 12.12.1cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 2025.1 < 2026.2.1cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 12.5 ≤ 12.5.18