Vendors / WGDashboard Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now WGDashboard records in CISA KEV No WGDashboard vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary code as root.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00769 · Published 2026-08-06 · No fix listed CWE-1336
Priority HIGH 82
A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1002 · Published 2026-08-06 · No fix listed CWE-78
Priority HIGH 82
A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00556 · Published 2026-08-06 · No fix listed CWE-918
Priority MEDIUM 52
WGDashboard is a dashboard for WireGuard VPN.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01824 · Published 2026-05-12 · Fixed in 4.3.2 CWE-20
Open these records in search → All records by CVSS severity
Critical4 High0 Medium0 Low0 No CVSS0