{"schema_version":1,"title":"Watchguard Dimension vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 16 vulnerabilities in Watchguard Dimension: 0 in the last 7 days and 16 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-78618, was published on 28 August 2026.","url":"https://junglewise.ai/threats/technologies/dimension","json_url":"https://junglewise.ai/threats/technologies/dimension.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/dimension","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":16,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":16,"last_90_days":16,"last_365_days":16},"latest":[{"cve":"CVE-2026-78618","cvss":6.9,"epss":0.0043,"slug":"cve-2026-78618-watchguard-dimension-business-logic-flaw-in-backend-operations","title":"WatchGuard Dimension business logic flaw in backend operations","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:24.58+00:00","url":"https://junglewise.ai/threats/cve-2026-78618-watchguard-dimension-business-logic-flaw-in-backend-operations"},{"cve":"CVE-2026-78617","cvss":6.3,"epss":0.0042,"slug":"cve-2026-78617-watchguard-dimension-missing-rate-limiting-on-web-login","title":"WatchGuard Dimension missing rate-limiting on web login","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:24.45+00:00","url":"https://junglewise.ai/threats/cve-2026-78617-watchguard-dimension-missing-rate-limiting-on-web-login"},{"cve":"CVE-2026-78616","cvss":4.8,"epss":0.003,"slug":"cve-2026-78616-watchguard-dimension-stored-xss-in-trusted-ca-certificate","title":"WatchGuard Dimension stored XSS in Trusted CA certificate configuration","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:24.317+00:00","url":"https://junglewise.ai/threats/cve-2026-78616-watchguard-dimension-stored-xss-in-trusted-ca-certificate"},{"cve":"CVE-2026-78615","cvss":4.6,"epss":0.0047,"slug":"cve-2026-78615-watchguard-dimension-reflected-xss-in-report-detail-page","title":"WatchGuard Dimension reflected XSS in report detail page","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:24.19+00:00","url":"https://junglewise.ai/threats/cve-2026-78615-watchguard-dimension-reflected-xss-in-report-detail-page"},{"cve":"CVE-2026-78614","cvss":8.6,"epss":0.0071,"slug":"cve-2026-78614-watchguard-dimension-sql-injection-in-audit-report-feature","title":"WatchGuard Dimension SQL injection in audit report feature","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:24.07+00:00","url":"https://junglewise.ai/threats/cve-2026-78614-watchguard-dimension-sql-injection-in-audit-report-feature"},{"cve":"CVE-2026-78613","cvss":8.6,"epss":0.0062,"slug":"cve-2026-78613-watchguard-dimension-sql-injection-in-log-viewer","title":"WatchGuard Dimension SQL injection in log viewer","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.943+00:00","url":"https://junglewise.ai/threats/cve-2026-78613-watchguard-dimension-sql-injection-in-log-viewer"},{"cve":"CVE-2026-78612","cvss":8.6,"epss":0.0071,"slug":"cve-2026-78612-watchguard-dimension-sql-injection-in-scheduled-report-feature","title":"WatchGuard Dimension SQL injection in scheduled report feature","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.807+00:00","url":"https://junglewise.ai/threats/cve-2026-78612-watchguard-dimension-sql-injection-in-scheduled-report-feature"},{"cve":"CVE-2026-78610","cvss":8.4,"epss":0.0023,"slug":"cve-2026-78610-watchguard-dimension-cross-site-request-forgery-in-administrator","title":"WatchGuard Dimension cross-site request forgery in administrator passphrase change","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.687+00:00","url":"https://junglewise.ai/threats/cve-2026-78610-watchguard-dimension-cross-site-request-forgery-in-administrator"},{"cve":"CVE-2026-78500","cvss":5.1,"epss":0.0044,"slug":"cve-2026-78500-watchguard-dimension-blind-ssrf-in-database-test-connection","title":"WatchGuard Dimension blind SSRF in database test connection","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.56+00:00","url":"https://junglewise.ai/threats/cve-2026-78500-watchguard-dimension-blind-ssrf-in-database-test-connection"},{"cve":"CVE-2026-78499","cvss":5.1,"epss":0.0044,"slug":"cve-2026-78499-watchguard-dimension-server-side-request-forgery-via-ftp-server","title":"WatchGuard Dimension server-side request forgery via FTP server test","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.443+00:00","url":"https://junglewise.ai/threats/cve-2026-78499-watchguard-dimension-server-side-request-forgery-via-ftp-server"},{"cve":"CVE-2026-78498","cvss":5.1,"epss":0.0044,"slug":"cve-2026-78498-watchguard-dimension-server-side-request-forgery-in-email-server","title":"WatchGuard Dimension server-side request forgery in email server test","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.317+00:00","url":"https://junglewise.ai/threats/cve-2026-78498-watchguard-dimension-server-side-request-forgery-in-email-server"},{"cve":"CVE-2026-78495","cvss":5.3,"epss":0.0039,"slug":"cve-2026-78495-watchguard-dimension-server-side-request-forgery-in-remote-backup","title":"WatchGuard Dimension server-side request forgery in Remote Backup Connection Test","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.197+00:00","url":"https://junglewise.ai/threats/cve-2026-78495-watchguard-dimension-server-side-request-forgery-in-remote-backup"},{"cve":"CVE-2026-78174","cvss":9.3,"epss":0.0043,"slug":"cve-2026-78174-watchguard-dimension-exposure-of-session-tokens-in-diagnostic","title":"WatchGuard Dimension exposure of session tokens in diagnostic logs","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.95+00:00","url":"https://junglewise.ai/threats/cve-2026-78174-watchguard-dimension-exposure-of-session-tokens-in-diagnostic"},{"cve":"CVE-2026-78103","cvss":5.1,"epss":0.0049,"slug":"cve-2026-78103-watchguard-dimension-configuration-lock-bypass","title":"WatchGuard Dimension configuration lock bypass","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.83+00:00","url":"https://junglewise.ai/threats/cve-2026-78103-watchguard-dimension-configuration-lock-bypass"},{"cve":"CVE-2026-78047","cvss":5.1,"epss":0.0044,"slug":"cve-2026-78047-watchguard-dimension-stored-xss-in-task-scheduling","title":"WatchGuard Dimension stored XSS in task scheduling","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.697+00:00","url":"https://junglewise.ai/threats/cve-2026-78047-watchguard-dimension-stored-xss-in-task-scheduling"},{"cve":"CVE-2026-13108","cvss":8.7,"epss":0.0025,"slug":"cve-2026-13108-watchguard-dimension-denial-of-service-via-tcp-syn-flood","title":"WatchGuard Dimension denial of service via TCP SYN flood","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:20.323+00:00","url":"https://junglewise.ai/threats/cve-2026-13108-watchguard-dimension-denial-of-service-via-tcp-syn-flood"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":16},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Watchguard Fireware OS","slug":"fireware-os","vulnerabilities":45,"url":"https://junglewise.ai/threats/technologies/fireware-os"},{"name":"Watchguard Agent","slug":"agent","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/agent"},{"name":"Watchguard Firebox","slug":"firebox","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/firebox"},{"name":"Watchguard Fireware","slug":"fireware","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/fireware"},{"name":"Watchguard XTM Appliances","slug":"xtm-appliances","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/xtm-appliances"},{"name":"Watchguard Mobile VPN with SSL client","slug":"mobile-vpn-with-ssl-client","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/mobile-vpn-with-ssl-client"},{"name":"Watchguard XTM","slug":"xtm","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/xtm"}],"technology":{"hub":true,"name":"Watchguard Dimension","slug":"dimension","vendor":{"name":"Watchguard","slug":"watchguard","url":"https://junglewise.ai/threats/vendors/watchguard"},"aliases":[],"category":"appliance","url":"https://junglewise.ai/threats/technologies/dimension"},"most_severe":[{"cve":"CVE-2026-78174","cvss":9.3,"epss":0.0043,"slug":"cve-2026-78174-watchguard-dimension-exposure-of-session-tokens-in-diagnostic","title":"WatchGuard Dimension exposure of session tokens in diagnostic logs","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.95+00:00","url":"https://junglewise.ai/threats/cve-2026-78174-watchguard-dimension-exposure-of-session-tokens-in-diagnostic"},{"cve":"CVE-2026-13108","cvss":8.7,"epss":0.0025,"slug":"cve-2026-13108-watchguard-dimension-denial-of-service-via-tcp-syn-flood","title":"WatchGuard Dimension denial of service via TCP SYN flood","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:20.323+00:00","url":"https://junglewise.ai/threats/cve-2026-13108-watchguard-dimension-denial-of-service-via-tcp-syn-flood"},{"cve":"CVE-2026-78614","cvss":8.6,"epss":0.0071,"slug":"cve-2026-78614-watchguard-dimension-sql-injection-in-audit-report-feature","title":"WatchGuard Dimension SQL injection in audit report feature","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:24.07+00:00","url":"https://junglewise.ai/threats/cve-2026-78614-watchguard-dimension-sql-injection-in-audit-report-feature"},{"cve":"CVE-2026-78612","cvss":8.6,"epss":0.0071,"slug":"cve-2026-78612-watchguard-dimension-sql-injection-in-scheduled-report-feature","title":"WatchGuard Dimension SQL injection in scheduled report feature","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.807+00:00","url":"https://junglewise.ai/threats/cve-2026-78612-watchguard-dimension-sql-injection-in-scheduled-report-feature"},{"cve":"CVE-2026-78613","cvss":8.6,"epss":0.0062,"slug":"cve-2026-78613-watchguard-dimension-sql-injection-in-log-viewer","title":"WatchGuard Dimension SQL injection in log viewer","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.943+00:00","url":"https://junglewise.ai/threats/cve-2026-78613-watchguard-dimension-sql-injection-in-log-viewer"},{"cve":"CVE-2026-78610","cvss":8.4,"epss":0.0023,"slug":"cve-2026-78610-watchguard-dimension-cross-site-request-forgery-in-administrator","title":"WatchGuard Dimension cross-site request forgery in administrator passphrase change","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.687+00:00","url":"https://junglewise.ai/threats/cve-2026-78610-watchguard-dimension-cross-site-request-forgery-in-administrator"},{"cve":"CVE-2026-78618","cvss":6.9,"epss":0.0043,"slug":"cve-2026-78618-watchguard-dimension-business-logic-flaw-in-backend-operations","title":"WatchGuard Dimension business logic flaw in backend operations","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:24.58+00:00","url":"https://junglewise.ai/threats/cve-2026-78618-watchguard-dimension-business-logic-flaw-in-backend-operations"},{"cve":"CVE-2026-78617","cvss":6.3,"epss":0.0042,"slug":"cve-2026-78617-watchguard-dimension-missing-rate-limiting-on-web-login","title":"WatchGuard Dimension missing rate-limiting on web login","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:24.45+00:00","url":"https://junglewise.ai/threats/cve-2026-78617-watchguard-dimension-missing-rate-limiting-on-web-login"},{"cve":"CVE-2026-78495","cvss":5.3,"epss":0.0039,"slug":"cve-2026-78495-watchguard-dimension-server-side-request-forgery-in-remote-backup","title":"WatchGuard Dimension server-side request forgery in Remote Backup Connection Test","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.197+00:00","url":"https://junglewise.ai/threats/cve-2026-78495-watchguard-dimension-server-side-request-forgery-in-remote-backup"},{"cve":"CVE-2026-78103","cvss":5.1,"epss":0.0049,"slug":"cve-2026-78103-watchguard-dimension-configuration-lock-bypass","title":"WatchGuard Dimension configuration lock bypass","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.83+00:00","url":"https://junglewise.ai/threats/cve-2026-78103-watchguard-dimension-configuration-lock-bypass"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}