Beveiligingsadvies

CVE-2026-78174

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-27 23:26:30
Laatst bijgewerkt 2026-08-28 15:56:52
Toegewezen door WatchGuard
CVSS-score 9.3
Status PUBLISHED

Beschrijving

WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and extract a Super Administrator's session token while that administrator is logged in, enabling account takeover.