This vulnerability (CVE-2026-13079) in WatchGuard Mobile VPN with SSL client for Windows is classified as CWE-732 (Incorrect Permission Assignment for Critical Resource). It enables a local attacker with low privileges to escalate their privileges to SYSTEM level on the host where the client is installed. The affected versions include all releases up to and including 2026.2. The CVSS 4.0 vector indicates local attack vector, low attack complexity, required privileges are low, no user interaction needed, and high impact on confidentiality, integrity, and availability. The vendor has not yet published an official fix or remediation guidance.

Successful exploitation allows a local attacker to gain SYSTEM-level privileges on the affected Windows machine, potentially leading to full control over the system. This can compromise system security, allowing unauthorized access to sensitive data and system resources.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users only and monitor for suspicious local activity related to the WatchGuard Mobile VPN with SSL client.