CVE-2026-78495: Dimension Server-Side Request Forgery via Remote Backup Connection Test
Published Aug 27, 2026
·Updated
A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.
Affected Software
1 affected component
WatchGuard WatchGuard Dimension
Event History
Aug 27, 2026
CVE Published
via MITRE·11:26 PM
Data Sourced
via MITRE·11:26 PM
RemedyDescriptionWeakness
Aug 28, 2026
Data Sourced
via NVD·02:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker must be authenticated and have privileged access to the WatchGuard Dimension Remote Backup Connection Test configuration.
2
What is the practical impact of exploitation?
An attacker can use the SSRF condition to enumerate exposed network services on systems adjacent to the WatchGuard Dimension deployment.