# CVE-2026-13108: WatchGuard Dimension denial of service via TCP SYN flood

Source: https://junglewise.ai/threats/cve-2026-13108-watchguard-dimension-denial-of-service-via-tcp-syn-flood  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-28. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-13108 · Severity: info · CVSS 8.7 · Published 2026-08-28

WatchGuard Dimension is a logging and analytics service used to monitor security appliances and network activity. An attacker can flood the log listening service with a high volume of TCP connection attempts, overwhelming the service and rendering it unavailable to legitimate users. No exploitation in the wild has been observed, but the vulnerability requires a network firewall to be properly deployed to mitigate.

Technologies: [Watchguard Dimension](https://junglewise.ai/threats/technologies/dimension). Vendors: [Watchguard](https://junglewise.ai/threats/vendors/watchguard).

## Quick answers

**Is CVE-2026-13108 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-13108 being exploited in the wild.

**How severe is CVE-2026-13108?** Informational severity, with a CVSS score of 8.7, published 28 August 2026.

**Which products and versions are affected?** Watchguard Dimension 2.0 through 2.3.0.

**Is there a fix for CVE-2026-13108?** A patch was published on 2026-08-27: Version 2.3.1 available Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-13108 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-13108?** Check whether you run Watchguard Dimension at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This is an uncontrolled resource consumption vulnerability (CWE-400) in the log listening service of WatchGuard Dimension. An attacker on the network can send a high volume of TCP SYN packets to trigger a denial-of-service condition by exhausting server resources. The vulnerability affects versions 2.0 through 2.3.0; the attack vector is network-based with no authentication requirement. Mitigation is available through upgrading to version 2.3.1 or deploying the Dimension server behind a firewall with rate-limiting protections.

## Affected products

- WatchGuard Dimension 2.0 through 2.3.0

## Timeline

- 2026-08-27: disclosed
- 2026-08-27: patched: Version 2.3.1 available

## References

- [https://psirt.watchguard.com/CVE-2026-13108](https://psirt.watchguard.com/CVE-2026-13108)

## Related threats

- [WatchGuard Dimension business logic flaw in backend operations](https://junglewise.ai/threats/cve-2026-78618-watchguard-dimension-business-logic-flaw-in-backend-operations)
- [WatchGuard Dimension missing rate-limiting on web login](https://junglewise.ai/threats/cve-2026-78617-watchguard-dimension-missing-rate-limiting-on-web-login)
- [WatchGuard Dimension stored XSS in Trusted CA certificate configuration](https://junglewise.ai/threats/cve-2026-78616-watchguard-dimension-stored-xss-in-trusted-ca-certificate)
- [WatchGuard Dimension reflected XSS in report detail page](https://junglewise.ai/threats/cve-2026-78615-watchguard-dimension-reflected-xss-in-report-detail-page)
- [WatchGuard Dimension SQL injection in audit report feature](https://junglewise.ai/threats/cve-2026-78614-watchguard-dimension-sql-injection-in-audit-report-feature)