WatchGuard Mobile VPN With SSL vulnerabilities

3 CVEs affecting WatchGuard Mobile VPN With SSL, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-13079, published 2026-07-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-3661, published 2024-05-06. High severity, CVSS 7.6. EPSS: 4.1% chance of exploitation in the next 30 days. DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over…
CVE-2024-4944, published 2024-07-09. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileged.
CVE-2026-13079, published 2026-07-03. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where…