CVE-2026-78616: medium-severity vulnerability in WatchGuard Dimension
Dimension Stored XSS via Trusted CA Certificate Configuration
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.8epss 0.3%
A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to execute arbitrary JavaScript in another authenticated administrator's web browser by saving a carefully crafted certificate.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
WatchGuard · DimensionRelated CVEs — WatchGuard Dimension
In the same product, most dangerous first.
CVE-2026-78612HIGHDimension SQL Injection in Scheduled ReportEPSS 0.7%CVE-2026-78614HIGHDimension SQL Injection in Audit ReportEPSS 0.7%CVE-2026-78613HIGHDimension SQL Injection in Log ViewerEPSS 0.6%CVE-2026-78103MEDIUMDimension Log Server Configuration Lock Bypass VulnerabilityEPSS 0.5%CVE-2026-78615MEDIUMWatchGuard Dimension Reflected DOM-Based XSS in Report Detail PageEPSS 0.5%CVE-2026-78498MEDIUMDimension Server-Side Request Forgery via Email Server Test SettingsEPSS 0.4%