SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-78614

HIGH · CVSS 8.6 EPSS 0.73%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

An authenticated SQL injection vulnerability in the audit report feature of WatchGuard Dimension allows users with report administration permissions to execute arbitrary commands as the Dimension WebUI process user. This high-severity flaw poses significant risks, including potential unauthorized access and control over the system. Organizations utilizing WatchGuard Dimension should prioritize patching this vulnerability to mitigate the associated security risks.

CVE
CVE-2026-78614
Severity
HIGH
CVSS
8.6
EPSS
0.73%

Original NVD Description

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests.