WatchGuard Mobile VPN With SSL Client vulnerabilities

3 CVEs affecting WatchGuard Mobile VPN With SSL Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-1910, published 2025-12-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-1910, published 2025-12-04. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM on the Windows machine where…
CVE-2025-1549, published 2025-10-29. Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days. A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system.…
CVE-2025-2781, published 2025-03-28. Medium severity, CVSS 6.3. EPSS: 0.1% chance of exploitation in the next 30 days. The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to…