7.3Yüksek
CVE-2026-13079WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation
Açıklama
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.
Zayıflık türü (CWE):
CWE-732
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| watchguard | fireware | 12.0.0 – < 12.12.1 | |
| watchguard | mobile vpn with ssl | < 2026.2.1 | |
| WatchGuard | Mobile VPN with SSL Client | 12.0 – < 2026.2.1 |
Kaynaklar ve yamalar
- https://psirt.watchguard.com/CVE-2026-13079 vendor-advisory
- https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00027 vendor-advisoryVendor Advisory
CPE eşleşmeleri (NVD) (4)
cpe:2.3:a:watchguard:mobile_vpn_with_ssl:*:*:*:*:*:windows:*:*< 2026.2.1cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 12.0.0 < 12.12.1cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 2025.1 < 2026.2.1cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 12.5 ≤ 12.5.18