CVE-2026-78495CWE-918ssrf

CVE-2026-78495

published August 28, 2026

CVSS

5.3

EPSS

Percentile

32.4

In the wild

Unconfirmed

What it is

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.

The record

Technical detail

CVSS: 5.3 · NONE
CVSS v4.0: 5.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N
EPSS: 0.00393 · 32.4th percentile
Weakness: CWE-918 · Server-Side Request Forgery (SSRF)
Published: 2026-08-28T06:16Z

References (1)

https://psirt.watchguard.com/CVE-2026-78495 · 5d1c2695-1a31-4499-88ae-e847036fd7e3

EPSS history

Timeline

27 AUG 23:26Z
Dimension Server-Side Request Forgery via Remote Backup Connection Test
cvelistv5