CVE-2026-78174 - WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and extract a Super Administrator's session token while that administrator is logged in, enabling account takeover. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-81732 [未知] CVE-2026-81732 - WWBN AVideo through version 30.0 fails to enforce aut…
• CVE-2026-42393 [低危] CVE-2026-42393 - The comparison used for the doveadm password and API …
• CVE-2026-42392 [中危] CVE-2026-42392 - An attacker that has valid credentials can send an in…
• CVE-2026-40203 [低危] CVE-2026-40203 - When IMAP compression is enabled, the same compressio…
• CVE-2026-78174 [未知] CVE-2026-78174 - WatchGuard Dimension records unredacted session ident…
• CVE-2026-61802 [中危] CVE-2026-61802 - Wazuh is an open-source security platform providing u…
• CVE-2026-61783 [未知] CVE-2026-61783 - Wazuh is an open-source security platform providing u…
• CVE-2026-77438 [高危] CVE-2026-77438 - Trilium is an open-source hierarchical note-taking ap…