CVE-2026-78612

Vulnerability Description

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests.

Related Weaknesses (CWE)

CWE-89 CWE-502

References

https://psirt.watchguard.com/CVE-2026-78612

FAQ

What is CVE-2026-78612?

CVE-2026-78612 is a documented vulnerability. WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report administration permissions gain arbitrary comm...

How severe is CVE-2026-78612?

CVSS scoring is not yet available for CVE-2026-78612. Check NVD for updates.

Is there a patch for CVE-2026-78612?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.