CVE-2026-86135:详情

CVE-2026-86135

2026-09-08
15h18 +00:00
Cross-Site Request Forgery - CSRF
A01-Broken Access Control
2026-09-08
19h15 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation by tricking an authenticated administrator into visiting a specially crafted web page.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-352 Cross-Site Request Forgery
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.

参考资料