CSRF Vulnerability in WatchGuard Dimension's Web UI
CVE-2026-78610

8.4HIGH

Key Information:

Vendor

Watchguard

Status
Dimension
Vendor
CVE Published:
27 August 2026

Badges

👾 Exploit Exists

What is CVE-2026-78610?

The Web UI of WatchGuard Dimension is vulnerable to a Cross-Site Request Forgery (CSRF) flaw, which permits an attacker to manipulate an authenticated global administrator's passphrase. By persuading the administrator to visit a malicious link, the attacker can alter the passphrase to a value of their choice, enabling unauthorized access without the administrator's knowledge or consent. This vulnerability highlights the necessity for implementing robust CSRF protections in web applications to safeguard against unauthorized actions.

Affected Version(s)

Dimension 2.0 < 2.3.1

References

https://psirt.watchguard.com/CVE-2026-78610
vendor-advisory

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yukusawa18
.