What’s Vulnerable › Products

WatchGuard Dimension vulnerabilities

17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.

Check whether your WatchGuard Dimension version is affected

Latest WatchGuard Dimension vulnerabilities

• CVE-2026-86135 — Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service (CVSS 7.0)
• CVE-2026-78618 — Dimension Business Logic Flaw Allows Chained Backend Object Operations (CVSS 6.9)
• CVE-2026-78617 — WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting (CVSS 6.3)
• CVE-2026-78616 — Dimension Stored XSS via Trusted CA Certificate Configuration (CVSS 4.8)
• CVE-2026-78615 — WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page (CVSS 4.6)
• CVE-2026-78614 — Dimension SQL Injection in Audit Report (CVSS 8.6)
• CVE-2026-78613 — Dimension SQL Injection in Log Viewer (CVSS 8.6)
• CVE-2026-78612 — Dimension SQL Injection in Scheduled Report (CVSS 8.6)
• CVE-2026-78610 — Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint (CVSS 8.4)
• CVE-2026-78500 — Dimension Blind SSRF via Database Test Connection Feature (CVSS 5.1)
• CVE-2026-78499 — Dimension SSRF via FTP Server Test Connection (CVSS 5.1)
• CVE-2026-78498 — Dimension Server-Side Request Forgery via Email Server Test Settings (CVSS 5.1)
• CVE-2026-78495 — Dimension Server-Side Request Forgery via Remote Backup Connection Test (CVSS 5.3)
• CVE-2026-78174 — WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs (CVSS 9.3)
• CVE-2026-78103 — Dimension Log Server Configuration Lock Bypass Vulnerability (CVSS 5.1)
• CVE-2026-78047 — Dimension Stored XSS in Scheduled Report Task (CVSS 5.1)
• CVE-2026-13108 — Dimension Denial-of-Service (CVSS 8.7)