CVE-2026-78612

Name of the Vulnerable Software and Affected Versions WatchGuard Dimension (affected versions not specified)

Description An authenticated SQL injection exists in the scheduled report feature. An authenticated user with report administration permissions can achieve arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, allowing unauthorized access to or manipulation of the database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.