CVE-2026-78616: WatchGuard Dimension

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to execute arbitrary JavaScript in another authenticated administrator's web browser by saving a carefully crafted certificate.

Affected products

• WatchGuard Dimension: from 2.0, before 2.3.1 (fixed in 2.3.1)

Published 2026-08-28. Last modified 2026-08-28.