CVE-2026-115495

UNKNOWN 0.0

Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker who can capture loopback traffic to obtain the user’s VPN username and password.

CWE	CWE-319
Vendor	watchguard
Product	mobile vpn with ssl client
Published	Oct 27, 2026

Stay Ahead of the Next One

Get instant alerts for watchguard mobile vpn with ssl client

Be the first to know when new unknown vulnerabilities affecting watchguard mobile vpn with ssl client are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

WatchGuard / Mobile VPN with SSL Client

12.0 < 2026.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

psirt.watchguard.com: https://psirt.watchguard.com/CVE-2026-115495

Credits

Discovered internally by WatchGuard