CVE-2026-78103CWE-841

CVE-2026-78103

published August 28, 2026

CVSS
5.1
EPSS
0%
Percentile
41.5
In the wild
Unconfirmed
What it is

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first completing the UI unlock step. This allows an authenticated read-write administrator session to bypass the intended editing workflow and overwrite configuration changes being made by another concurrent administrator session.

The record
Technical detail
CVSS
5.1 · NONE
CVSS v4.0
5.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00493 · 41.5th percentile
Weakness
CWE-841 · Improper Enforcement of Behavioral Workflow
Published
2026-08-28T06:16Z
References (1)
EPSS history
Timeline
  • 27 AUG 23:26Z
    Dimension Log Server Configuration Lock Bypass Vulnerability
    cvelistv5