AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

WatchGuard TechnologiesCVE-2026-78500

WatchGuard Technologies Dimension: server-side request forgery

WatchGuard Technologies

CVE-2026-78500 · Published Aug 28, 2026

Medium5.1
Fix: upgrade to 2.3.1 or later
WatchGuard Technologies advisory

A blind server-side request forgery (SSRF) vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.

Affected versions

PackageAffectedFixed in
Dimension
Product
>= 2.0, < 2.3.12.3.1
Details and references
CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-208, CWE-918

More WatchGuard Technologies advisories

All WatchGuard Technologies
High 8.6Aug 28WatchGuard Technologies Dimension: SQL injectionCVE-2026-78614fixed in 2.3.1Medium 4.6Aug 28WatchGuard Technologies Dimension: cross-site scriptingCVE-2026-78615fixed in 2.3.1Medium 4.8Aug 28WatchGuard Technologies Dimension: cross-site scriptingCVE-2026-78616fixed in 2.3.1Medium 6.3Aug 28WatchGuard Technologies Dimension: observable discrepancyCVE-2026-78617fixed in 2.3.1Medium 6.9Aug 28WatchGuard Technologies Dimension: improper access controlCVE-2026-78618fixed in 2.3.1Medium 5.3Aug 28WatchGuard Technologies Dimension: server-side request forgeryCVE-2026-78495fixed in 2.3.1