HIGH · 7.8

CVE-2026-13079

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the...

Vulnerability Description

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
WatchguardMobile Vpn With Ssl< 2026.2.1
WatchguardFireware>= 12.0.0, < 12.12.1
WatchguardFirebox M270-
WatchguardFirebox M290-
WatchguardFirebox M370-
WatchguardFirebox M390-
WatchguardFirebox M440-
WatchguardFirebox M4600-
WatchguardFirebox M470-
WatchguardFirebox M4800-
WatchguardFirebox M5600-
WatchguardFirebox M570-
WatchguardFirebox M5800-
WatchguardFirebox M590-
WatchguardFirebox M670-
WatchguardFirebox M690-
WatchguardFirebox Nv5-
WatchguardFirebox T20-
WatchguardFirebox T25-
WatchguardFirebox T40-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2026-13079?

CVE-2026-13079 is a vulnerability with a CVSS score of 7.8 (HIGH). A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the...

How severe is CVE-2026-13079?

CVE-2026-13079 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-13079?

Check the references section above for vendor advisories and patch information. Affected products include: Watchguard Mobile Vpn With Ssl, Watchguard Fireware, Watchguard Firebox M270, Watchguard Firebox M290, Watchguard Firebox M370.