Cleartext Transmission Vulnerability in WatchGuard Mobile VPN for Windows
CVE-2026-115495

5.7MEDIUM

Key Information:

Vendor

Watchguard

Status
Mobile Vpn With Ssl Client
Vendor
CVE Published:
27 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-115495?

A vulnerability exists in WatchGuard's Mobile VPN with SSL client for Windows, where a local attacker can exploit cleartext transmission to intercept sensitive data. This flaw enables the unauthorized capture of a user’s VPN username and password through loopback traffic, posing a significant risk to user credentials and overall security.

Affected Version(s)

Mobile VPN with SSL Client Windows 12.0 < 2026.4

References

https://psirt.watchguard.com/CVE-2026-115495
vendor-advisory

CVSS V4

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Discovered internally by WatchGuard
.