WatchGuard Dimension CVE-2026-78499

Exploitation requires authenticated access to WatchGuard Dimension with high-privilege (administrative) credentials, as confirmed by PR:H in the CVSS 4.0 vector. The FTP Server Test configuration feature must be present and accessible within the attacker's privilege scope. Adjacent network systems must be reachable from the Dimension server's network position for enumeration to yield results. Factors limiting exploitation: the PR:H requirement means an unauthenticated or low-privilege attacker cannot exploit this directly; the impact is confined to service enumeration (no code execution, no data exfiltration from the vulnerable system itself); and exploitation is most relevant in environments where the Dimension server has broad internal network reach. No special non-default configuration is described as required beyond the presence of the FTP test feature.

The CVSS 4.0 base score is 5.1, reflecting a moderate severity finding. The vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N indicates the vulnerability is network-reachable with low attack complexity but critically requires high privileges (PR:H) - meaning the attacker must already hold administrative or privileged credentials on WatchGuard Dimension. The impact is confined to subsequent-system confidentiality at a low level (SC:L), representing service enumeration on adjacent hosts rather than data exfiltration or system compromise. Vulnerable-system confidentiality, integrity, and availability are all rated N, meaning the Dimension host itself is not directly harmed. No EPSS score was provided; however, given the PR:H requirement and limited scope of impact (network enumeration only), real-world exploitation risk is substantially lower than the network-vector rating might suggest. This vulnerability is not in the CISA KEV catalog and no public exploit code has been identified, reinforcing a measured rather than urgent risk posture. The primary concern is insider threat or post-compromise lateral reconnaissance by an attacker who has already gained admin access to Dimension.

An attacker who has obtained privileged credentials to WatchGuard Dimension - whether through credential theft, insider access, or prior compromise - navigates to the FTP Server Test configuration panel and enters an internal RFC-1918 IP address and port as the FTP test target. The Dimension server initiates a TCP connection to the specified host and port, and the attacker infers from connection success, failure, or banner responses which services are running on adjacent network hosts that would otherwise be inaccessible from the attacker's vantage point. No public exploit code for this specific vulnerability has been identified.