WatchGuard VPN Client for Windows Vulnerability Enables Command Execution With SYSTEM Privileges
ID: aa279772-6177-5337-b95f-08def8aca90b
STIX ID: report--aa279772-6177-5337-b95f-08def8aca90b
Feed Name: cybersecurityNews.com
Threat Score
WatchGuard disclosed WGSA-2026-00002: a privilege-escalation flaw in its Mobile VPN with IPSec Windows client where the MSI installer spawns cmd.exe running as SYSTEM during install/update/uninstall, allowing a local attacker to interact with the elevated command prompt and execute arbitrary SYSTEM-level commands; affects versions up to 15.19 and is fixed in 15.33.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.