Vulnerability · Published Aug 27, 2026 · Assigned by WatchGuard

CVE-2026-78103Dimension Log Server Configuration Lock Bypass Vulnerability

Medium 5.1

In plain English

A medium-severity security flaw in Dimension from WatchGuard. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).

Severity (CVSS 4.0)5.1Medium

Exploit odds (30 days)0.5%top 57.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first completing the UI unlock step. This allows an authenticated read-write administrator session to bypass the intended editing workflow and overwrite configuration changes being made by another concurrent administrator session.

Affected products (as reported)

Vendor	Product	Versions
WatchGuard	Dimension	2.0 – before 2.3.1

Weakness: CWE-841 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

References

https://psirt.watchguard.com/CVE-2026-78103 vendor-advisory