# Watchguard Dimension vulnerabilities Source: https://junglewise.ai/threats/technologies/dimension Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/dimension.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 16 vulnerabilities in Watchguard Dimension: 0 in the last 7 days and 16 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-78618, was published on 28 August 2026. Nothing was published in the last eight weeks. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 16 - All time: 16 (0 critical, 0 exploited in the wild) ## About Watchguard Dimension WatchGuard network appliance providing firewall, VPN, and threat management capabilities. ## Latest Watchguard Dimension vulnerabilities - [CVE-2026-78618: WatchGuard Dimension business logic flaw in backend operations](https://junglewise.ai/threats/cve-2026-78618-watchguard-dimension-business-logic-flaw-in-backend-operations) (info, CVSS 6.9, published 28 Aug 2026) - [CVE-2026-78617: WatchGuard Dimension missing rate-limiting on web login](https://junglewise.ai/threats/cve-2026-78617-watchguard-dimension-missing-rate-limiting-on-web-login) (info, CVSS 6.3, published 28 Aug 2026) - [CVE-2026-78616: WatchGuard Dimension stored XSS in Trusted CA certificate configuration](https://junglewise.ai/threats/cve-2026-78616-watchguard-dimension-stored-xss-in-trusted-ca-certificate) (info, CVSS 4.8, published 28 Aug 2026) - [CVE-2026-78615: WatchGuard Dimension reflected XSS in report detail page](https://junglewise.ai/threats/cve-2026-78615-watchguard-dimension-reflected-xss-in-report-detail-page) (info, CVSS 4.6, published 28 Aug 2026) - [CVE-2026-78614: WatchGuard Dimension SQL injection in audit report feature](https://junglewise.ai/threats/cve-2026-78614-watchguard-dimension-sql-injection-in-audit-report-feature) (info, CVSS 8.6, published 28 Aug 2026) - [CVE-2026-78613: WatchGuard Dimension SQL injection in log viewer](https://junglewise.ai/threats/cve-2026-78613-watchguard-dimension-sql-injection-in-log-viewer) (info, CVSS 8.6, published 28 Aug 2026) - [CVE-2026-78612: WatchGuard Dimension SQL injection in scheduled report feature](https://junglewise.ai/threats/cve-2026-78612-watchguard-dimension-sql-injection-in-scheduled-report-feature) (info, CVSS 8.6, published 28 Aug 2026) - [CVE-2026-78610: WatchGuard Dimension cross-site request forgery in administrator passphrase change](https://junglewise.ai/threats/cve-2026-78610-watchguard-dimension-cross-site-request-forgery-in-administrator) (info, CVSS 8.4, published 28 Aug 2026) - [CVE-2026-78500: WatchGuard Dimension blind SSRF in database test connection](https://junglewise.ai/threats/cve-2026-78500-watchguard-dimension-blind-ssrf-in-database-test-connection) (info, CVSS 5.1, published 28 Aug 2026) - [CVE-2026-78499: WatchGuard Dimension server-side request forgery via FTP server test](https://junglewise.ai/threats/cve-2026-78499-watchguard-dimension-server-side-request-forgery-via-ftp-server) (info, CVSS 5.1, published 28 Aug 2026) - [CVE-2026-78498: WatchGuard Dimension server-side request forgery in email server test](https://junglewise.ai/threats/cve-2026-78498-watchguard-dimension-server-side-request-forgery-in-email-server) (info, CVSS 5.1, published 28 Aug 2026) - [CVE-2026-78495: WatchGuard Dimension server-side request forgery in Remote Backup Connection Test](https://junglewise.ai/threats/cve-2026-78495-watchguard-dimension-server-side-request-forgery-in-remote-backup) (info, CVSS 5.3, published 28 Aug 2026) - [CVE-2026-78174: WatchGuard Dimension exposure of session tokens in diagnostic logs](https://junglewise.ai/threats/cve-2026-78174-watchguard-dimension-exposure-of-session-tokens-in-diagnostic) (info, CVSS 9.3, published 28 Aug 2026) - [CVE-2026-78103: WatchGuard Dimension configuration lock bypass](https://junglewise.ai/threats/cve-2026-78103-watchguard-dimension-configuration-lock-bypass) (info, CVSS 5.1, published 28 Aug 2026) - [CVE-2026-78047: WatchGuard Dimension stored XSS in task scheduling](https://junglewise.ai/threats/cve-2026-78047-watchguard-dimension-stored-xss-in-task-scheduling) (info, CVSS 5.1, published 28 Aug 2026) - [CVE-2026-13108: WatchGuard Dimension denial of service via TCP SYN flood](https://junglewise.ai/threats/cve-2026-13108-watchguard-dimension-denial-of-service-via-tcp-syn-flood) (info, CVSS 8.7, published 28 Aug 2026) ## Most severe Watchguard Dimension vulnerabilities - [CVE-2026-78174: WatchGuard Dimension exposure of session tokens in diagnostic logs](https://junglewise.ai/threats/cve-2026-78174-watchguard-dimension-exposure-of-session-tokens-in-diagnostic) (info, CVSS 9.3, published 28 Aug 2026) - [CVE-2026-13108: WatchGuard Dimension denial of service via TCP SYN flood](https://junglewise.ai/threats/cve-2026-13108-watchguard-dimension-denial-of-service-via-tcp-syn-flood) (info, CVSS 8.7, published 28 Aug 2026) - [CVE-2026-78614: WatchGuard Dimension SQL injection in audit report feature](https://junglewise.ai/threats/cve-2026-78614-watchguard-dimension-sql-injection-in-audit-report-feature) (info, CVSS 8.6, published 28 Aug 2026) - [CVE-2026-78612: WatchGuard Dimension SQL injection in scheduled report feature](https://junglewise.ai/threats/cve-2026-78612-watchguard-dimension-sql-injection-in-scheduled-report-feature) (info, CVSS 8.6, published 28 Aug 2026) - [CVE-2026-78613: WatchGuard Dimension SQL injection in log viewer](https://junglewise.ai/threats/cve-2026-78613-watchguard-dimension-sql-injection-in-log-viewer) (info, CVSS 8.6, published 28 Aug 2026) - [CVE-2026-78610: WatchGuard Dimension cross-site request forgery in administrator passphrase change](https://junglewise.ai/threats/cve-2026-78610-watchguard-dimension-cross-site-request-forgery-in-administrator) (info, CVSS 8.4, published 28 Aug 2026) - [CVE-2026-78618: WatchGuard Dimension business logic flaw in backend operations](https://junglewise.ai/threats/cve-2026-78618-watchguard-dimension-business-logic-flaw-in-backend-operations) (info, CVSS 6.9, published 28 Aug 2026) - [CVE-2026-78617: WatchGuard Dimension missing rate-limiting on web login](https://junglewise.ai/threats/cve-2026-78617-watchguard-dimension-missing-rate-limiting-on-web-login) (info, CVSS 6.3, published 28 Aug 2026) - [CVE-2026-78495: WatchGuard Dimension server-side request forgery in Remote Backup Connection Test](https://junglewise.ai/threats/cve-2026-78495-watchguard-dimension-server-side-request-forgery-in-remote-backup) (info, CVSS 5.3, published 28 Aug 2026) - [CVE-2026-78103: WatchGuard Dimension configuration lock bypass](https://junglewise.ai/threats/cve-2026-78103-watchguard-dimension-configuration-lock-bypass) (info, CVSS 5.1, published 28 Aug 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 16 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Watchguard technologies - [Watchguard Fireware OS](https://junglewise.ai/threats/technologies/fireware-os): 76 vulnerabilities - [Watchguard Agent](https://junglewise.ai/threats/technologies/agent): 8 vulnerabilities - [Watchguard Firebox](https://junglewise.ai/threats/technologies/firebox): 6 vulnerabilities - [Watchguard Fireware](https://junglewise.ai/threats/technologies/fireware): 6 vulnerabilities - [Watchguard AuthPoint Authentication Gateway](https://junglewise.ai/threats/technologies/authpoint-authentication-gateway): 5 vulnerabilities - [Watchguard XTM Appliances](https://junglewise.ai/threats/technologies/xtm-appliances): 4 vulnerabilities - [Watchguard Mobile VPN with SSL client](https://junglewise.ai/threats/technologies/mobile-vpn-with-ssl-client): 3 vulnerabilities - [Watchguard XTM](https://junglewise.ai/threats/technologies/xtm): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Watchguard Dimension vulnerabilities", https://junglewise.ai/threats/technologies/dimension, 9 November 2026.