CVE-2026-78195: Dimension Stored XSS via Backup Historical Data Feature
Published Aug 27, 2026
·Updated
A Cross-Site Scripting (XSS) vulnerability in the WatchGuard Dimension Backup Historical Data feature allows an authenticated administrator user to execute arbitrary JavaScript in another user's browser.
Affected Software
1 affected component
WatchGuard Dimension Backup Historical Data feature
Event History
Aug 27, 2026
CVE Published
via MITRE·11:26 PM
Data Sourced
via MITRE·11:26 PM
RemedyDescriptionWeakness
Frequently Asked Questions
1
Who can exploit this issue?
Exploitation requires an authenticated administrator user of the WatchGuard Dimension Backup Historical Data feature.
2
What is the impact of successful exploitation?
An administrator can cause arbitrary JavaScript to execute in another user's browser.