CVE-2026-86135 : 상세 정보

CVE-2026-86135

2026-09-08
15h18 +00:00
Cross-Site Request Forgery - CSRF
A01-Broken Access Control
2026-09-08
19h15 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation by tricking an authenticated administrator into visiting a specially crafted web page.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-352 Cross-Site Request Forgery
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.

참고 자료