Vulnerability Report

CVE-2026-13079

Title: Local Privilege Escalation in Mobile VPN with SSL client

Auth Bypass

Proof Of Concept

No public PoC currently indexed for CVE-2026-13079.

CWE Category CWE-732

Published Date Jul 03, 2026

Modified Date Jul 10, 2026

Exploit Status Not Found

Score 7.3 CVSS v4.0

Exploit Probability (EPSS)

0.11%

Vulnerability Summary

CVE-2026-13079: A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.

Impacted Vendors

watchguard 39

Reference Links

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00027

CVSS v4.0

Source Entity 5d1c2695-1a31-4499-88ae-e847036fd7e3

Severity HIGH

7.3

Attack Vector

LOCAL

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

N/A

RAW VECTOR

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

Source Entity [email protected]