Local Privilege Escalation Vulnerability in WatchGuard Mobile VPN for Windows
CVE-2026-13079

7.3HIGH

Key Information:

Vendor

Watchguard

Status
Mobile Vpn With Ssl Client
Vendor
CVE Published:
2 July 2026

Badges

👾 Exploit Exists

What is CVE-2026-13079?

A local privilege escalation vulnerability exists in the WatchGuard Mobile VPN with SSL client for Windows that enables an attacker with local access to elevate their privileges to that of NT AUTHORITY\SYSTEM. This issue impacts versions up to and including 2026.2, potentially allowing unauthorized users to gain elevated permissions and execute malicious activities on the affected system.

Affected Version(s)

Mobile VPN with SSL Client Windows 12.0 < 2026.2.1

References

https://psirt.watchguard.com/CVE-2026-13079
vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-...
vendor-advisory

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Paul Arzelier, Truesec
.