CVE-2026-78495

Dimension Server-Side Request Forgery via Remote Backup Connection Test

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Dimension

CVE-2026-78615

WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page

A Reflected Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in a authenticated user's browser with a specially crafted URL.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Dimension

CVE-2026-78103

Dimension Log Server Configuration Lock Bypass Vulnerability

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first completing the UI unlock step. This allows an authenticated read-write administrator session to bypass the intended editing workflow and overwrite configuration changes being made by another concurrent administrator session.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Dimension

CVE-2026-78612

Dimension SQL Injection in Scheduled Report

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Dimension

CVE-2026-78498

Dimension Server-Side Request Forgery via Email Server Test Settings

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Email Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Dimension

CVE-2026-78616

Dimension Stored XSS via Trusted CA Certificate Configuration

A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to execute arbitrary JavaScript in another authenticated administrator's web browser by saving a carefully crafted certificate.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Dimension

CVE-2026-78499

Dimension SSRF via FTP Server Test Connection

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Dimension

CVE-2026-19313

Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Fireware Os

CVE-2026-78610

Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint

WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker who can induce an authenticated global administrator's browser to visit a crafted link or page can change that administrator's passphrase to an attacker-chosen value without the administrator's consent.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Dimension

CVE-2026-78009

Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS)

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Fireware Os

CVE-2026-19316

Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS)

A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Fireware Os

CVE-2026-81851

Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon (iked), resulting in a denial of service, by saving a specially crafted configuration.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Fireware Os

CVE-2026-78174

WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs

WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and extract a Super Administrator's session token while that administrator is logged in, enabling account takeover.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Dimension

CVE-2026-78047

Dimension Stored XSS in Scheduled Report Task

A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/JavaScript into these fields, which then executes in the browser session of any other user.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Dimension

CVE-2026-78617

WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting

WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowing a remote attacker to perform automated password guessing against user accounts. If the account lockout setting is enabled, brute-force attempts are blocked after a defined number of failed attempts, but this setting is not enabled by default.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Dimension

CVE-2026-57909

WatchGuard Agent path traversal allows unauthenticated remote code execution

A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Agent Watchguard Agent

CVE-2026-57910

WatchGuard Agent improper authentication allows unauthenticated remote code execution

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Agent Watchguard Agent

CVE-2026-4266

WatchGuard Firebox Insecure Deserialization in Fireware Access Portal

An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user. Note, this vulnerability does not affect Firebox platforms that do not support the Access Portal feature, including the T15 and T35.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Firebox Cloud Firebox M270 Firebox M290 and 35 more

CVE-2026-4315

WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI

A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware Web UI by convincing an authenticated administrator into visiting a malicious web page.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Firebox Cloud Firebox M270 Firebox M290 and 37 more

CVE-2026-3987

WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI

A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may allow a privileged authenticated remote attacker to execute arbitrary code in the context of an elevated system process.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Firebox Cloud Firebox M270 Firebox M290 and 35 more