CVE-2026-78612highCWE-502CWE-89

CVE-2026-78612: falha de alta gravidade em WatchGuard Dimension

Dimension SQL Injection in Scheduled Report

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Dimension

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.6epss 0.7%
WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
WatchGuard · Dimension
CVEs relacionadas — WatchGuard Dimension

No mesmo produto, das mais perigosas para as menos.

CVE-2026-78614HIGHDimension SQL Injection in Audit ReportEPSS 0.7%CVE-2026-78613HIGHDimension SQL Injection in Log ViewerEPSS 0.6%CVE-2026-78103MEDIUMDimension Log Server Configuration Lock Bypass VulnerabilityEPSS 0.5%CVE-2026-78615MEDIUMWatchGuard Dimension Reflected DOM-Based XSS in Report Detail PageEPSS 0.5%CVE-2026-78498MEDIUMDimension Server-Side Request Forgery via Email Server Test SettingsEPSS 0.4%CVE-2026-78499MEDIUMDimension SSRF via FTP Server Test ConnectionEPSS 0.4%