CVE-2026-78499: Dimension SSRF via FTP Server Test Connection
Published Aug 27, 2026
·Updated
A server-side request forgery (SSRF) vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.
Affected Software
1 affected component
WatchGuard WatchGuard Dimension
Event History
Aug 27, 2026
CVE Published
via MITRE·11:26 PM
Data Sourced
via MITRE·11:26 PM
RemedyDescriptionWeakness
Frequently Asked Questions
1
Who can exploit this issue?
Exploitation requires an authenticated attacker with privileged access to the WatchGuard Dimension FTP Server Test configuration.
2
What could an attacker do with successful exploitation?
An attacker could use the server-side request capability to enumerate exposed network services on adjacent network systems.