CVE-2026-13079

Medienbericht

EPSS 0.14%
Veröffentlicht 02.07.2026 23:07:30
Zuletzt bearbeitet 10.08.2026 20:17:25
Erkennungen
Login

WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed.

This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

NVD 4 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Watchguard ≫ Mobile Vpn With Ssl SwPlatform windows Version < 2026.2.1

Watchguard ≫ Fireware Version >= 12.0.0 < 12.12.1

   Watchguard ≫ Firebox M270 Version -
   Watchguard ≫ Firebox M290 Version -
   Watchguard ≫ Firebox M370 Version -
   Watchguard ≫ Firebox M390 Version -
   Watchguard ≫ Firebox M440 Version -
   Watchguard ≫ Firebox M4600 Version -
   Watchguard ≫ Firebox M470 Version -
   Watchguard ≫ Firebox M4800 Version -
   Watchguard ≫ Firebox M5600 Version -
   Watchguard ≫ Firebox M570 Version -
   Watchguard ≫ Firebox M5800 Version -
   Watchguard ≫ Firebox M590 Version -
   Watchguard ≫ Firebox M670 Version -
   Watchguard ≫ Firebox M690 Version -
   Watchguard ≫ Firebox Nv5 Version -
   Watchguard ≫ Firebox T20 Version -
   Watchguard ≫ Firebox T25 Version -
   Watchguard ≫ Firebox T40 Version -
   Watchguard ≫ Firebox T45 Version -
   Watchguard ≫ Firebox T55 Version -
   Watchguard ≫ Firebox T70 Version -
   Watchguard ≫ Firebox T80 Version -
   Watchguard ≫ Firebox T85 Version -
   Watchguard ≫ Fireboxcloud Version -
   Watchguard ≫ Fireboxv Version -

Watchguard ≫ Fireware Version >= 2025.1 < 2026.2.1

   Watchguard ≫ Firebox M295 Version -
   Watchguard ≫ Firebox M395 Version -
   Watchguard ≫ Firebox M495 Version -
   Watchguard ≫ Firebox M595 Version -
   Watchguard ≫ Firebox M695 Version -
   Watchguard ≫ Firebox T115-w Version -
   Watchguard ≫ Firebox T125 Version -
   Watchguard ≫ Firebox T125-w Version -
   Watchguard ≫ Firebox T145 Version -
   Watchguard ≫ Firebox T145-w Version -
   Watchguard ≫ Firebox T185 Version -

Watchguard ≫ Fireware Version >= 12.5 <= 12.5.18

Watchguard ≫ Firebox T15 Version -
Watchguard ≫ Firebox T35 Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.14%	0.039

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
5d1c2695-1a31-4499-88ae-e847036fd7e3	7.3	0	0	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

06.07.2026 15:32

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00027

Vendor Advisory

https://psirt.watchguard.com/CVE-2026-13079

https://nvd.nist.gov/vuln/detail/CVE-2026-13079

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-13079

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-13079

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-13079