CVE-2026-78617

Vulnerability Description

WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowing a remote attacker to perform automated password guessing against user accounts. If the account lockout setting is enabled, brute-force attempts are blocked after a defined number of failed attempts, but this setting is not enabled by default.

Related Weaknesses (CWE)

CWE-203 CWE-307

References

https://psirt.watchguard.com/CVE-2026-78617

FAQ

What is CVE-2026-78617?

CVE-2026-78617 is a documented vulnerability. WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowing a remote attacker to perform automated password guessing against user accounts...

How severe is CVE-2026-78617?

CVSS scoring is not yet available for CVE-2026-78617. Check NVD for updates.

Is there a patch for CVE-2026-78617?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.