Is CVE-2026-78047 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-78047

Description

A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/JavaScript into these fields, which then executes in the browser session of any other user.