Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-15733

WGDashboard Remote Code Execution vulnerability

A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root.

CVSS 3.1 · 9.8 Critical EPSS 10.0% KEV · Not listed
Vendors
Wgdashboard
Products
Wgdashboard
CVE-2026-15734

WGDashboard Server-Side Template Injection vulnerability

A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary code as root.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Wgdashboard
Products
Wgdashboard
CVE-2026-15732

WGDashboard Server-Side Request Forgery Vulnerability

A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Wgdashboard
Products
Wgdashboard
CVE-2026-44343

WGDashboard: Critical Vulnerability in 4.3.2

WGDashboard is a dashboard for WireGuard VPN. Prior to 4.3.2, there are critical vulnerabilities affecting WGDashboard that, if exploited, could allow unauthorized parties to access the host file system without authentication. This vulnerability is fixed in 4.3.2.

CVSS 4.0 · 9.3 Critical EPSS 1.8% KEV · Not listed
Vendors
Wgdashboard
Products
Wgdashboard