CVE-2026-78614
Dimension SQL Injection in Audit Report
- State
- Published
- Severity
- 8.6 High
- Published
- Aug 27, 2026
- Updated
- Aug 28, 2026
- Reserved
- Aug 24, 2026
Description
WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.6 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | WatchGuard |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
DimensionWatchGuard |
|
References
- https://psirt.watchguard.com/CVE-2026-78614vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.