Wgdashboard Wgdashboard vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Wgdashboard Wgdashboard: 4 record(s), with affected versions and fixes.cpe:2.3:a:wgdashboard:wgdashboard
CVE-2026-15734
Critical · 9.8
CWE-1336 Aug 6, 2026
WGDashboard Server-Side Template Injection vulnerability
A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary code as root.
CVE-2026-15733
Critical · 9.8
CWE-78 Aug 6, 2026
WGDashboard Remote Code Execution vulnerability
A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root.
CVE-2026-15732
Critical · 9.8
CWE-918 Aug 6, 2026
WGDashboard Server-Side Request Forgery Vulnerability
A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses.
CVE-2026-44343
Critical · 9.8
Public exploit CWE-20 May 12, 2026
WGDashboard: Critical Vulnerability in 4.3.2
WGDashboard is a dashboard for WireGuard VPN. Prior to 4.3.2, there are critical vulnerabilities affecting WGDashboard that, if exploited, could allow unauthorized parties to access the host file system without authentication. This vulnerability is fixed in 4.3.2.