CVE-2026-78618: WatchGuard Dimension

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request.

Affected products

• WatchGuard Dimension: from 2.0, before 2.3.1 (fixed in 2.3.1)

Published 2026-08-28. Last modified 2026-08-28.