CVE-2026-78618: watchguard dimension Improper Access Control
CVSS: 6.9v4.0MediumDeferred
Published 27-08-2026Last modified 28-08-2026
Vulnerability summary
CVE-2026-78618 is a medium (CVSS 6.9) Improper Access Control vulnerability in watchguard dimension. EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 36.2% of scored vulnerabilities.
CVSS score
6.9/10
010
Medium · v4.0 (CVE.org)EPSS score
0.43%
0%100%
Low · +0.18 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 27-08-2026PublishedVulnerability first disclosed.
- 28-08-2026Last modifiedVulnerability information updated.
Description
A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request.
CVSS metrics
2 scores · 2 sources · 1 versionMedium 6.9Preferred score · CVE.org (CNA)
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:NSourcesAll 2 agree
- NVDNIST6.9MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS trend
Probability
0.43%
Chance of exploitation in the next 30 days
Percentile
36%
Versus all other CVEs
30-day change
+0.18 pp
From 0.25% on 21-09-2026
21-09-202621-10-2026
EPSS score0.43%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-284Improper Access ControlThe product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
- CWE-841Improper Enforcement of Behavioral WorkflowThe product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence.
Affected systems
Watchguard1 product
- dimension≥ 2.0, < 2.3.1
1 vendor · 1 product
References
1 links- psirt.watchguard.com/CVE-2026-78618Vendor Advisory