CVE-2026-78047

Summary

A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/JavaScript into these fields, which then executes in the browser session of any other user.

Affected Software

VendorProductVersion RangeStatus
WatchGuardDimension2.0 < 2.3.1affected

Weaknesses

  • CWE-79: CWE-79

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References