CVE-2026-78618— Dimension Business Logic Flaw Allows Chained Backend Object Operations
Quick assessment
Affected
WatchGuard Dimension
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WatchGuard Dimension 中存在一个业务逻辑缺陷，允许已认证的管理员通过发送一个精心构造的请求，在单个逻辑流程中触发多个后端操作。
Possible ATT&CK Techniques 1 AI
T1531 · Account Access RemovalAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| WatchGuard | Dimension | 2.0< 2.3.1 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-78618
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Dimension Business Logic Flaw Allows Chained Backend Object Operations
Source: CVE Program / CVE List V5
Vulnerability Description
A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
访问控制不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| WatchGuard | Dimension | 2.0 ~ 2.3.1 | - |
|
II. Public POCs for CVE-2026-78618
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-78618
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-78618 (1)
Same Patch Batch · WatchGuard · 2026-08-27 · 28 CVEs total
| CVE-2026-13086 | 9.3 CRITICAL | Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint |
| CVE-2026-19315 | 9.3 CRITICAL | Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution |
| CVE-2026-19313 | 9.3 CRITICAL | Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution |
| CVE-2026-19318 | 9.3 CRITICAL | Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution |
| CVE-2026-78174 | 9.3 CRITICAL | WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs |
| CVE-2026-78009 | 8.7 HIGH | Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS) |
| CVE-2026-13108 | 8.7 HIGH | Dimension Denial-of-Service |
| CVE-2026-19314 | 8.7 HIGH | Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS) |
| CVE-2026-19316 | 8.7 HIGH | Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS) |
| CVE-2026-19317 | 8.7 HIGH | Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS) |
| CVE-2026-78010 | 8.7 HIGH | Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service |
| CVE-2026-78011 | 8.7 HIGH | Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS) |
| CVE-2026-78008 | 8.6 HIGH | Fireware OS Authenticated Buffer Overflow in wgagent |
| CVE-2026-78613 | 8.6 HIGH | Dimension SQL Injection in Log Viewer |
| CVE-2026-78612 | 8.6 HIGH | Dimension SQL Injection in Scheduled Report |
| CVE-2026-78614 | 8.6 HIGH | Dimension SQL Injection in Audit Report |
| CVE-2026-78610 | 8.4 HIGH | Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint |
| CVE-2026-81851 | 6.9 MEDIUM | Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service |
| CVE-2026-78617 | 6.3 MEDIUM | WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting |
| CVE-2026-78495 | 5.3 MEDIUM | Dimension Server-Side Request Forgery via Remote Backup Connection Test |
Showing top 20 of 28 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Dimension
-
CVE-2026-78616
Dimension Stored XSS via Trusted CA Certificate Configuratio -
CVE-2026-78612
Dimension SQL Injection in Scheduled Report -
CVE-2026-78498
Dimension Server-Side Request Forgery via Email Server Test -
CVE-2026-13108
Dimension Denial-of-Service -
CVE-2026-78047
Dimension Stored XSS in Scheduled Report Task
Same vendor: WatchGuard
-
CVE-2026-78616
Dimension Stored XSS via Trusted CA Certificate Configuratio -
CVE-2026-78498
Dimension Server-Side Request Forgery via Email Server Test -
CVE-2026-78612
Dimension SQL Injection in Scheduled Report -
CVE-2026-78047
Dimension Stored XSS in Scheduled Report Task -
CVE-2026-78614
Dimension SQL Injection in Audit Report
Same weakness: CWE-284
-
CVE-2026-55678
Arc: Unauthenticated cluster node admission when `cluster.sh -
CVE-2026-54745
Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling -
CVE-2026-40204
暂无已知公开利用程序 -
CVE-2026-81573
Improper Access Control in Local-Only Configuration Commands -
CVE-2026-77034
Joomla Extension - joomlaeventmanager.net - Unauthenticated
V. Comments for CVE-2026-78618
No comments yet