7.3High
CVE-2026-13079WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation
Description
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.
Weakness (CWE):
CWE-732
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| watchguard | fireware | 12.0.0 – < 12.12.1 | |
| watchguard | mobile vpn with ssl | < 2026.2.1 | |
| WatchGuard | Mobile VPN with SSL Client | 12.0 – < 2026.2.1 |
References and patches
- https://psirt.watchguard.com/CVE-2026-13079 vendor-advisory
- https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00027 vendor-advisoryVendor Advisory
CPE matches (NVD) (4)
cpe:2.3:a:watchguard:mobile_vpn_with_ssl:*:*:*:*:*:windows:*:*< 2026.2.1cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 12.0.0 < 12.12.1cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 2025.1 < 2026.2.1cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 12.5 ≤ 12.5.18