EUVD-2026-67357

A Stored Cross-Site Scripting XSS vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to execute arbitrary JavaScript in another authenticated administrator's web browser by saving a carefully crafted certificate...

CVE-2026-78618

A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request...

CVE-2026-78008

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service DoS condition or potentially execute arbitrary code by sending specially crafted network traffic...

CVE-2026-78103

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first...

EUVD-2026-67305

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon iked, resulting in a denial of service, by saving a specially crafted configuration...

CVE-2026-81851

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon iked, resulting in a denial of service, by saving a specially crafted configuration...

CVE-2026-78103 Dimension Log Server Configuration Lock Bypass Vulnerability

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first...

CVE-2026-78103

WatchGuard Dimension (Log Server) is affected by a configuration lock bypass in its server-side configuration endpoint. The product provides a client-side lock/unlock UI control for management changes, but the server-side endpoint does not enforce this workflow state. As a result, an authenticate...

CVE-2026-78195

CVE-2026-78195 was rejected as a duplicate of CVE-2026-78047. The underlying vulnerability is a Cross-Site Scripting (XSS) flaw in the WatchGuard Dimension Backup Historical Data feature, which allows an authenticated administrator to execute arbitrary JavaScript in another user's browser. No spe...

CVE-2026-78618

CVE-2026-78618 is a business logic flaw in WatchGuard Dimension that allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request. The flaw scores 6.9 (MEDIUM) under CVSS 4.0, with high confidentiality impact on t...

CVE-2026-57499

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated administrator to execute arbitrary operating system commands on the Liman server. The ipaddress parameter is embedded...

PT-2026-82857

A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request...

PT-2026-82543

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated administrator to execute arbitrary operating system commands on the Liman server. The ip address parameter is embedded...

CVE-2026-80214

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

Command Injection

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Command Injection in the Virtualization Discovery process. An attacker can execute arbitrary commands on the host...

CVE-2026-80214 LibreNMS Virtualisation Discovery Module RCE

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

CVE-2026-80214 LibreNMS Virtualisation Discovery Module RCE

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

CVE-2026-80214

LibreNMS 's Virtualization Discovery module is susceptible to command line injection , allowing an authenticated admin user to execute arbitrary code on the host server. The CVSS 4.0 base score is 8.6 (HIGH) , reflecting network reachability with low attack complexity but requiring high privilege...

EUVD-2026-66227

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

PT-2026-81923

Name of the Vulnerable Software and Affected Versions LibreNMS affected versions not specified Description The Virtualization Discovery module contains a command line injection flaw. This allows an authenticated administrator to execute arbitrary code on the host server. Recommendations At the...