CVE-2026-78498: Dimension Server-Side Request Forgery via Email Server Test Settings
Published Aug 27, 2026
·Updated
A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Email Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.
Affected Software
2 affected components
WatchGuard Dimension Email Server
WatchGuard Dimension
Event History
Aug 27, 2026
CVE Published
via MITRE·11:26 PM
Data Sourced
via MITRE·11:26 PM
RemedyDescriptionWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker must be authenticated and have privileged access to the WatchGuard Dimension Email Server Test configuration.
2
What can exploitation enable?
The issue can be used to enumerate exposed network services on systems adjacent to the affected WatchGuard Dimension deployment.