Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-78616 EUVD-2026-67357GHSA-mv85-7f73-2rv3

Dimension Stored XSS via Trusted CA Certificate Configuration

Published Aug 27, 2026 · Updated Aug 28, 2026 · Assigned by WatchGuard

Vendor: WatchGuard Product: Dimension

Description

A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to execute arbitrary JavaScript in another authenticated administrator's web browser by saving a carefully crafted certificate.

Affected products

VendorProductAffectedFixed
WatchGuard Dimension 2.0 – < 2.3.1 2.3.1

References