SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-78047

MEDIUM · CVSS 5.1 EPSS 0.26%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A stored cross-site scripting vulnerability in WatchGuard Dimension's task scheduling feature allows low-privileged authenticated administrators to inject arbitrary HTML/JavaScript, impacting any user who accesses the affected fields. This could lead to session hijacking or unauthorized actions within the application. Organizations using WatchGuard Dimension should prioritize remediation to mitigate potential exploitation risks.

CVE
CVE-2026-78047
Severity
MEDIUM
CVSS
5.1
EPSS
0.26%
Java

Original NVD Description

A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/JavaScript into these fields, which then executes in the browser session of any other user.