Threat database

CVE-2026-78500 is a medium severity vulnerability in WatchGuard Dimension version 2.0. It is a blind server-side request forgery (SSRF) issue in the Database Server Test configuration that allows an authenticated privileged attacker to enumerate network services on adjacent systems.

WatchGuard Dimension version 2.0 is vulnerable to a denial-of-service (DoS) condition triggered by an attacker sending a high volume of TCP SYN packets to its log listening service. This vulnerability is identified as CWE-400, which relates to uncontrolled resource consumption. The CVSS 4.0 base score is 8.7, indicating a high severity level. No official patch or remediation guidance has been provided by the vendor as of the publication date. There are no known exploits in the wild at this time.

CVE-2026-78614 is an authenticated SQL injection vulnerability in WatchGuard Dimension's audit report feature. It allows an authenticated user with report administration permissions to execute arbitrary commands as the Dimension WebUI process user by sending specially crafted requests. The vulnerability affects version 2.0 of WatchGuard Dimension. The CVSS 4.0 base score is 8.6, indicating high severity.

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code by sending specially crafted network traffic.

CVE-2026-81851 is a heap-based buffer overflow vulnerability in the iked process of WatchGuard Fireware OS. It allows an authenticated administrator to cause a denial of service by crashing the IKE daemon through saving a specially crafted configuration. The vulnerability affects specific versions of Fireware OS. No official patch or remediation guidance is currently provided by the vendor. The CVSS 4.0 score rates this vulnerability as medium severity.