CVE-2026-13108: CWE-400 in WatchGuard Dimension

CVE-2026-13108 affects WatchGuard Dimension version 2.0 and involves a denial-of-service vulnerability caused by the log listening service's inability to handle a high volume of TCP SYN packets. This leads to resource exhaustion consistent with CWE-400. The vulnerability can be exploited remotely without authentication or user interaction, resulting in a high impact on availability. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability. No official remediation or patch has been disclosed by WatchGuard.

Successful exploitation results in denial of service by exhausting resources of the log listening service, potentially disrupting logging and monitoring capabilities of WatchGuard Dimension 2.0. This affects the availability of the service but does not indicate confidentiality or integrity impacts. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing network-level protections such as rate limiting or filtering of TCP SYN packets targeting the log listening service to reduce the risk of denial-of-service attacks.