CVE catalog

CVE-2026-13079

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the

[CVE catalog]

Severity
High · CVSS 7.3CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published
Source
[NVD] · [CVE record]
EPSS
0.14% · Oct 25, 2026

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Cpemobile_vpn_with_sslNot reported2026.2.1fixed
CpefirewareNot reported12.12.1fixed
CpefirewareNot reported2026.2.1fixed
CpefirewareNot reportedNot reportedunknown
Cpemobile_vpn_with_sslNot reported2026.2.1fixed
CpefirewareNot reportedNot reportedunknown

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Cpemobile_vpn_with_sslcpeNot reported2026.2.1Not reportedNot reportedNot reported
CpefirewarecpeNot reported12.12.1Not reportedNot reportedNot reported
CpefirewarecpeNot reported2026.2.1Not reportedNot reportedNot reported
Cpemobile_vpn_with_sslcpeNot reported2026.2.1Not reportedNVD-CVE-2026-13079Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)]