Mobile Vpn With Ssl Client
Monthly
WatchGuard Mobile VPN with SSL Client for Windows before 2026.4 exposes VPN usernames and passwords by transmitting them in cleartext over the loopback interface during authentication, allowing a local attacker who can capture loopback traffic to recover credentials. Exploitation requires an existing foothold on the endpoint and capture during an active VPN login, and no public exploit identified at time of analysis; the vendor has released version 2026.4 to address the issue.
WatchGuard Mobile VPN with SSL Client for Windows before 2026.4 exposes VPN usernames and passwords by transmitting them in cleartext over the loopback interface during authentication, allowing a local attacker who can capture loopback traffic to recover credentials. Exploitation requires an existing foothold on the endpoint and capture during an active VPN login, and no public exploit identified at time of analysis; the vendor has released version 2026.4 to address the issue.