Dimension
- Software type
- Other
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, Dimension recorded 17 security vulnerabilities in the last 90 days, of which 7 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Dimension and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-86135Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of ServiceCVE-2026-78618Dimension Business Logic Flaw Allows Chained Backend Object OperationsCVE-2026-78617WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate LimitingCVE-2026-78616Dimension Stored XSS via Trusted CA Certificate ConfigurationCVE-2026-78615WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-86135Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service | Exploitation statusNot exploited | FixYes |
| SeverityHigh |
CVE-2026-78618Dimension Business Logic Flaw Allows Chained Backend Object Operations | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-78617WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-78616Dimension Stored XSS via Trusted CA Certificate Configuration | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-78615WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-78614Dimension SQL Injection in Audit Report | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityHigh |
|---|
CVE-2026-78613Dimension SQL Injection in Log Viewer | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityHigh |
|---|
CVE-2026-78612Dimension SQL Injection in Scheduled Report | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityHigh |
|---|
CVE-2026-78610Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityHigh |
|---|
CVE-2026-78500Dimension Blind SSRF via Database Test Connection Feature | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-78499Dimension SSRF via FTP Server Test Connection | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-78498Dimension Server-Side Request Forgery via Email Server Test Settings | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-78495Dimension Server-Side Request Forgery via Remote Backup Connection Test | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-78174WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityCritical |
|---|
CVE-2026-78103Dimension Log Server Configuration Lock Bypass Vulnerability | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-78047Dimension Stored XSS in Scheduled Report Task | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-13108Dimension Denial-of-Service | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityHigh |
|---|
17 Results | Page 1 of 1