VULNERABILITY INTELLIGENCE
CVE-2026-78617
EPSS probability0.41%
CISA KEVNot currently listed
Published2026-08-28
Last modified2026-08-28
Description
WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowing a remote attacker to perform automated password guessing against user accounts. If the account lockout setting is enabled, brute-force attempts are blocked after a defined number of failed attempts, but this setting is not enabled by default.
Weakness classification
- 5d1c2695-1a31-4499-88ae-e847036fd7e3: CWE-203