CVE-2026-78103mediumCWE-841

CVE-2026-78103: falha de média gravidade em WatchGuard Dimension

Dimension Log Server Configuration Lock Bypass Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Dimension

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.1epss 0.5%
WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first completing the UI unlock step. This allows an authenticated read-write administrator session to bypass the intended editing workflow and overwrite configuration changes being made by another concurrent administrator session.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Produtos afetados
WatchGuard · Dimension
CVEs relacionadas — WatchGuard Dimension

No mesmo produto, das mais perigosas para as menos.

CVE-2026-78612HIGHDimension SQL Injection in Scheduled ReportEPSS 0.7%CVE-2026-78614HIGHDimension SQL Injection in Audit ReportEPSS 0.7%CVE-2026-78613HIGHDimension SQL Injection in Log ViewerEPSS 0.6%CVE-2026-78615MEDIUMWatchGuard Dimension Reflected DOM-Based XSS in Report Detail PageEPSS 0.5%CVE-2026-78498MEDIUMDimension Server-Side Request Forgery via Email Server Test SettingsEPSS 0.4%CVE-2026-78499MEDIUMDimension SSRF via FTP Server Test ConnectionEPSS 0.4%