WatchGuard VPN Client for Windows Vulnerability Enables Command Execution With SYSTEM Privileges

Cybersecuritynews •Abinaya • February 5, 2026

A security advisory addressing a significant privilege-escalation vulnerability affecting its Mobile VPN with an IPSec client for Windows. The flaw, identified as WGSA-2026-00002, allows local attackers to execute arbitrary commands with SYSTEM-level privileges, potentially granting them unrestricted access to the host machine. This vulnerability affects the underlying software technology from NCP Engineering that WatchGuard uses […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

WatchGuard VPN Client Vulnerability Allows SYSTEM-Level Command Execution A privilege escalation vulnerability has been identified in the WatchGuard Mobile VPN with IPSec client for Windows, tracked as WGSA-2026-00002. This flaw allows local attackers to execute arbitrary commands with SYSTEM-level privileges, potentially compromising the host machine. The vulnerability is rooted in the underlying software technology provided by NCP Engineering. 3 sources 35

Extracted Entities

WatchGuard VPN Client for Windows Vulnerability Enables Command Execution With SYSTEM Privileges

The full story

Extracted Entities

Companies (2)

MITRE ATT&CK (1)

Platforms (1)

Vulnerabilities (1)