CVE-2025-1910CWE-77command-injection

CVE-2025-1910

published December 5, 2025

CVSS
6.3
EPSS
0%
Percentile
17.4
In the wild
Unconfirmed
What it is

The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM on the Windows machine where the VPN Client is installed.

The record
Technical detail
CVSS
6.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00265 · 17.4th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2025-12-05T03:15Z
References (2)
https://psirt.watchguard.com/CVE-2025-1910 · 5d1c2695-1a31-4499-88ae-e847036fd7e3https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00008 · 5d1c2695-1a31-4499-88ae-e847036fd7e3
EPSS history
Timeline
  • 04 DEC 21:56Z
    WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package
    cvelistv5