CVE-2026-1154955.7Medium
Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket
WatchGuard · Mobile VPN with SSL Client
Not in CISA KEVVendor fix available
No EPSS score yet. The score appears once FIRST publishes it.
5.7MediumCVSS
LowMediumHighCrit.
DescriptionNVD
Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker who can capture loopback traffic to obtain the user’s VPN username and password.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 28 Oct.
- WatchGuard fixes 18 Fireware flaws, including critical RCE bugSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.