CVE-2026-78610 - WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker who can induce an authenticated global administrator's browser to visit a crafted link or page can change that administrator's passphrase to an attacker-chosen value without the administrator's consent. - 漏洞详情

漏洞编号：CVE-2026-78610

风险等级：未知

漏洞来源：CVE

CVE 编号：CVE-2026-78610

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-352

发布/更新时间：2026-08-28 / 2026-08-28

漏洞描述

WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker who can induce an authenticated global administrator's browser to visit a crafted link or page can change that administrator's passphrase to an attacker-chosen value without the administrator's consent.

漏洞描述

相关链接

相关漏洞