CVE-2026-78103
MediumCVSS 5.1Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first completing the UI unlock step. This allows an authenticated read-write administrator session to bypass the intended editing workflow and overwrite configuration changes being made by another concurrent administrator session.
Risk Assessment
The risk is that configuration changes made by another administrator can be overwritten, potentially leading to unauthorized modifications of security settings or disruption of system operations.
Recommendation
It is recommended to update WatchGuard Dimension to the latest version that enforces the lock/unlock state on the server side, and to implement separation of duties for administrative sessions.
Other vulnerabilities in WatchGuard Dimension
See all- CVE-2026-78174Critical
Vulnerability in WatchGuard Dimension: web UI diagnostic log stores unredacted session identifiers for logged-in users. A low-privileged Dimension Administrator can retrieve this log and extract a Super Administrator's session token, enabling account takeover.
- CVE-2026-78618Medium
A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request.
- CVE-2026-78617Medium
WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default, allowing a remote attacker to perform automated password guessing against user accounts. If the account lockout setting is enabled, brute-force attempts are blocked after a defined number of failed attempts, but this setting is not enabled by default.
- CVE-2026-78616Medium
A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to execute arbitrary JavaScript in another authenticated administrator's web browser by saving a carefully crafted certificate.
- CVE-2026-78615Medium
A Reflected Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in an authenticated user's browser with a specially crafted URL.
- CVE-2026-78614High
WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature, allowing an authenticated user with report administration permissions to gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests.
- CVE-2026-78613High
WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature, allowing an authenticated user with report administration permissions to gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests.
- CVE-2026-78612High
WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature, allowing an authenticated user with report administration permissions to gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests.
- CVE-2026-78610High
WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker who can induce an authenticated global administrator's browser to visit a crafted link or page can change that administrator's passphrase to an attacker-chosen value without the administrator's consent.
- CVE-2026-78500Medium
A blind server-side request forgery (SSRF) vulnerability in WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.
Original NVD description (English source)
WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first completing the UI unlock step. This allows an authenticated read-write administrator session to bypass the intended editing workflow and overwrite configuration changes being made by another concurrent administrator session.