CVE-2026-86135highCWE-352CWE-400

CVE-2026-86135: falha de alta gravidade em WatchGuard Dimension

Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service

Publicada em

Seguir esta CVE+ Monitorar Dimension

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7epss 0.2%
A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation by tricking an authenticated administrator into visiting a specially crafted web page.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Produtos afetados
WatchGuard · Dimension
CVEs relacionadas — WatchGuard Dimension

No mesmo produto, das mais perigosas para as menos.

CVE-2026-78612HIGHDimension SQL Injection in Scheduled ReportEPSS 0.7%CVE-2026-78614HIGHDimension SQL Injection in Audit ReportEPSS 0.7%CVE-2026-78613HIGHDimension SQL Injection in Log ViewerEPSS 0.6%CVE-2026-78103MEDIUMDimension Log Server Configuration Lock Bypass VulnerabilityEPSS 0.5%CVE-2026-78615MEDIUMWatchGuard Dimension Reflected DOM-Based XSS in Report Detail PageEPSS 0.5%CVE-2026-78498MEDIUMDimension Server-Side Request Forgery via Email Server Test SettingsEPSS 0.4%