CVE-2026-78500CWE-208CWE-918ssrf

CVE-2026-78500

published August 28, 2026

CVSS
5.1
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

A blind server-side request forgery (SSRF) vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.

The record
Technical detail
CVSS
5.1 · NONE
CVSS v4.0
5.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N
EPSS
0.00441 · 37.2th percentile
Weaknesses
CWE-208 · Observable Timing Discrepancy; CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-08-28T06:16Z
References (1)
https://psirt.watchguard.com/CVE-2026-78500 · 5d1c2695-1a31-4499-88ae-e847036fd7e3
EPSS history
Timeline
  • 27 AUG 23:26Z
    Dimension Blind SSRF via Database Test Connection Feature
    cvelistv5