CVE-2026-78103: Dimension Log Server Configuration Lock Bypass Vulnerability
WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first completing the UI unlock step. This allows an authenticated read-write administrator session to bypass the intended editing workflow and overwrite configuration changes being made by another concurrent administrator session.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict Dimension administrative access so that only a single trusted administrator session can make concurrent configuration changes (e.g., limit who has read-write admin privileges and coordinate change windows) to mitigate the configuration lock-bypass workflow issue.
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated administrator with read-write access can exploit it. The issue is relevant where more than one administrator may make configuration changes concurrently.
What access or conditions are required to exploit it?
The attacker needs an authenticated read-write administrator session and the ability to submit configuration changes directly to the server-side configuration endpoint. They do not need to complete the client-side UI unlock step.
What is the practical impact during concurrent administration?
A read-write administrator can bypass the intended editing workflow and overwrite configuration changes being made by another administrator session.