CVE-2026-78500 MEDIUM

CVE-2026-78500: Dimension Blind SSRF via Database Test Connection Feature

Vendor Watchguard
Product Dimension
Weakness CWE-208
Published August 27, 2026
Last update August 28, 2026
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N

What the vulnerability does

01Description

A blind server-side request forgery (SSRF) vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.

Key dates

02Disclosure timeline

August 27, 2026 CVE published
August 28, 2026 Record updated