Description
A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation by tricking an authenticated administrator into visiting a specially crafted web page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WatchGuard | Dimension | 2.0 – < 2.3.1 | 2.3.1 |
Advisories 1
- NCSC-2026-0404 Kwetsbaarheden verholpen in WatchGuard Fireware OS NCSC-NL (Netherlands) · Oct 7, 2026
References
- https://psirt.watchguard.com/CVE-2026-86135 vendor-advisory