CVE-2026-78610 — Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint

CVE-2026-78610

Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint PUBLISHED

Description (CNA)

WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker who can induce an authenticated global administrator's browser to visit a crafted link or page can change that administrator's passphrase to an attacker-chosen value without the administrator's consent.

Affected (CNA)

Vendor / product	Versions
WatchGuard / Dimension	affected 2.0 before 2.3.1

CWE

CWE-352

References

https://psirt.watchguard.com/CVE-2026-78610

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.