Search/CVE-2026-78103
● CVE

CVE-2026-78103

DiscoveredAug 28, 2026UpdatedAug 28, 2026

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first completing the UI unlock step. This allows an authenticated read-write administrator session to bypass the intended editing workflow and overwrite configuration changes being made by another concurrent administrator session.

CVSS v3.1
—
EPSS
0.49%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 29, 2026 → Sep 25, 2026
▲ 0.24pp
0.26% → 0.49% over 3 tracked changes
Connections
1 relationships
Timeline
disclosure → media coverage
Aug 28, 2026
Disclosure — published as a CVE record.