CVE-2026-78618#

Dimension Business Logic Flaw Allows Chained Backend Object Operations

Medium 6.9 CVSS v4.0 › Published 2026-08-27Updated 2026-08-27

Summary #

A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request.

Product status #

Product	Affected	Not affected
Dimension	>= 2.0, < 2.3.1	>= 2.3.1

Weakness Type and Impact #

CWECWE-284Improper Access Control
CWECWE-841Improper Enforcement of Behavioral Workflow
CAPECCAPEC-233Privilege Escalation
CAPECCAPEC-586Object Injection

Exploitation Status #

WatchGuard is not aware of any exploitation of this vulnerability in the wild.

Solution #

Dimension 2.3.1

References #

Credits #

Cody Sixteenfinder