Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2026-115495

Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket

Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker who can capture loopback traffic to obtain the user’s VPN username and password.

CVSS 4.0 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Watchguard
Products
Mobile Vpn With Ssl Client
CVE-2026-13079

WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Watchguard
Products
Firebox M270 Firebox M290 Firebox M295 and 39 more
CVE-2025-1549

WatchGuard Mobile VPN with SSL Local Privilege Escallation

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.5

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft Watchguard
Products
Windows Mobile Vpn With Ssl Mobile Vpn With Ssl Client
CVE-2025-1910

WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package

The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM on the Windows machine where the VPN Client is installed.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Watchguard
Products
Mobile Vpn With Ssl Client
CVE-2025-2781

WatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation Directory

The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Watchguard
Products
Mobile Vpn With Ssl Client
CVE-2024-3661

DHCP routing options can manipulate interface-based VPN traffic

DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.

CVSS 3.1 · 7.6 High EPSS 4.1% KEV · Not listed
Vendors
Apple Cisco Citrix and 7 more
Products
Iphone Os Macos Anyconnect Vpn Client and 10 more