Critical severityNVD Advisory· Published Aug 28, 2026· Updated Aug 28, 2026
CVE-2026-78174
CVE-2026-78174
Description
WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and extract a Super Administrator's session token while that administrator is logged in, enabling account takeover.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
3- ⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and MoreThe Hacker News · Sep 7, 2026
- WatchGuard Patches Critical VulnerabilitiesSecurityWeek · Sep 1, 2026
- WatchGuard: 25 Vulnerabilities Disclosed, Including RCE in Fireware OS and SQLi in DimensionVypr Intelligence · Aug 28, 2026