en
Severity across 17 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 18 vulnerability records affecting Dimension.
Among the 17 records analyzed by CyStack, 7 are High or Critical and 0 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-86135Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-78616Dimension Stored XSS via Trusted CA Certificate Configuration | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-78498Dimension Server-Side Request Forgery via Email Server Test Settings | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-78195CVE-2026-78195 | Exploitation statusNot confirmed | FixNot confirmed | Published08/27/2026 | SeverityUnknown |
CVE-2026-78612Dimension SQL Injection in Scheduled Report | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityHigh |
CVE-2026-78103Dimension Log Server Configuration Lock Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-78615WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-78613Dimension SQL Injection in Log Viewer | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityHigh |
CVE-2026-78495Dimension Server-Side Request Forgery via Remote Backup Connection Test | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-78617WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-78047Dimension Stored XSS in Scheduled Report Task | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-78610Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityHigh |
CVE-2026-78499Dimension SSRF via FTP Server Test Connection | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-78174WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityCritical |
CVE-2026-78618Dimension Business Logic Flaw Allows Chained Backend Object Operations | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-78500Dimension Blind SSRF via Database Test Connection Feature | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-13108Dimension Denial-of-Service | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityHigh |
CVE-2026-78614Dimension SQL Injection in Audit Report | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityHigh |
