CVE-2026-13079

WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation

HIGH

7.8

CVSS Score

Published: July 2, 2026 at 11:07 PM UTC

Updated: October 25, 2026 at 09:10 PM UTC

2 products affected across 1 vendorFirewareMobile VPN with SSL· also runs on 38 platforms

Using Fireware OS by WatchGuard?

Get instant alerts when new vulnerabilities affect Fireware OS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.1%

SSVC

No known exploit

Description

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Fireware · WatchGuard

95%

12.0.0 ≤ v < 12.12.112.5 ≤ v ≤ 12.5.182025.1 ≤ v < 2026.2.1

Affected range stops below 12.12.1, so it looks safe — our inference, not a vendor statement

Affected range stops below 2026.2.1, so it looks safe — our inference, not a vendor statement

watchguard-firebox-m270 (environment) · watchguard-firebox-m290 (environment) · watchguard-firebox-m295 (environment) · watchguard-firebox-m370 (environment) · watchguard-firebox-m390 (environment) · watchguard-firebox-m395 (environment) · watchguard-firebox-m440 (environment) · watchguard-firebox-m4600 (environment) · watchguard-firebox-m470 (environment) · watchguard-firebox-m4800 (environment) · watchguard-firebox-m495 (environment) · watchguard-firebox-m5600 (environment) · watchguard-firebox-m570 (environment) · watchguard-firebox-m5800 (environment) · watchguard-firebox-m590 (environment) · watchguard-firebox-m595 (environment) · watchguard-firebox-m670 (environment) · watchguard-firebox-m690 (environment) · watchguard-firebox-m695 (environment) · watchguard-firebox-nv5 (environment) · watchguard-firebox-t115-w (environment) · watchguard-firebox-t125 (environment) · watchguard-firebox-t125-w (environment) · watchguard-firebox-t145 (environment) · watchguard-firebox-t145-w (environment) · watchguard-firebox-t15 (environment) · watchguard-firebox-t185 (environment) · watchguard-firebox-t20 (environment) · watchguard-firebox-t25 (environment) · watchguard-firebox-t35 (environment) · watchguard-firebox-t40 (environment) · watchguard-firebox-t45 (environment) · watchguard-firebox-t55 (environment) · watchguard-firebox-t70 (environment) · watchguard-firebox-t80 (environment) · watchguard-firebox-t85 (environment) · watchguard-fireboxcloud (environment) · watchguard-fireboxv (environment)

Mobile VPN with SSL · WatchGuard

95%

v < 2026.2.112.0

Affected range stops below 2026.2.1, so it looks safe — our inference, not a vendor statement