Vulnerabilities

TI-2026-23525 CVE-2026-30404 · GHSA-rg9m-jxjw-mqj6

The backend database management connection test feature in wgcloud v3.6.3 has a…

LOW 38

The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00268 Published 2026-03-19 No fix listed CWE-918

TI-2026-23524 CVE-2026-30403 · GHSA-xcmq-x2p7-666f

There is an arbitrary file read vulnerability in the test connection function of backend…

LOW 39

There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, which can be used to read any file on the victim's server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0039 Published 2026-03-19 No fix listed CWE-22

TI-2026-23523 CVE-2026-30402 · GHSA-gm5g-f3w5-8443

An issue in wgcloud v.2.3.7 and before allows a remote attacker to execute arbitrary code…

HIGH 82

An issue in wgcloud v.2.3.7 and before allows a remote attacker to execute arbitrary code via the test connection function

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2026-03-19 No fix listed CWE-94

Vulnerabilities

Filters

The backend database management connection test feature in wgcloud v3.6.3 has a…

There is an arbitrary file read vulnerability in the test connection function of backend…

An issue in wgcloud v.2.3.7 and before allows a remote attacker to execute arbitrary code…