CVE-2026-78495: CWE-918 in WatchGuard Dimension

This vulnerability (CWE-918) in WatchGuard Dimension version 2.0 involves an SSRF flaw in the Remote Backup Connection Test feature. An authenticated user with privileged access can exploit this to enumerate exposed network services on systems adjacent to the device running Dimension. This could aid attackers in network reconnaissance but does not directly indicate further exploitation or data compromise. No patch or official remediation level has been provided by the vendor as of the published date.

An authenticated privileged attacker can leverage this SSRF vulnerability to discover network services on adjacent systems, potentially facilitating further attacks or reconnaissance. There is no indication of direct data compromise or remote code execution from the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor WatchGuard advisories for updates. Restricting privileged access and limiting network exposure of the affected feature may reduce risk.