{"id":"CVE-2026-78174","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-78174","summary":"WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and extract…","details":"WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and extract a Super Administrator's session token while that administrator is logged in, enabling account takeover.","published":"2026-08-27T23:26:30.875Z","modified":"2026-08-27T23:26:30.875Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"ADVISORY","url":"https://psirt.watchguard.com/CVE-2026-78174"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-08-27T23:26:30.875Z"}}