CVE-2026-115495
CVE-2026-115495 · Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker who can capture loopback traffic to obtain the user’s VPN username and password.
CVSS 5.7 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
mobile vpn with ssl client
- Versions
- ≥ 12.0, < 2026.4: Affected (semver)
Update to 2026.4