7.3Alta
CVE-2026-13079WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation
Descripción
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.
Debilidad (CWE):
CWE-732
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| watchguard | fireware | 12.0.0 – < 12.12.1 | |
| watchguard | mobile vpn with ssl | < 2026.2.1 | |
| WatchGuard | Mobile VPN with SSL Client | 12.0 – < 2026.2.1 |
Referencias y parches
- https://psirt.watchguard.com/CVE-2026-13079 vendor-advisory
- https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00027 vendor-advisoryVendor Advisory
Coincidencias CPE (NVD) (4)
cpe:2.3:a:watchguard:mobile_vpn_with_ssl:*:*:*:*:*:windows:*:*< 2026.2.1cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 12.0.0 < 12.12.1cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 2025.1 < 2026.2.1cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 12.5 ≤ 12.5.18