Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: wg-easy Clear all filters
TI-2026-50860 CVE-2026-72603 · GHSA-g5jq-gh88-3gmw

wg-easy wg-easy - OS Command Injection

Priority MEDIUM 47

An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.create permission to execute arbitrary commands as root by injecting newline-delimited WireGuard PostUp directives into the client nam…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02235 Published 2026-08-11 No fix listed CWE-78
TI-2026-45039 CVE-2026-63089 · GHSA-m894-wgpg-hwpv

WireGuard Easy Weak Token Generation Information Disclosure via OTL Route

Priority MEDIUM 45

WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation vulnerability that allows unauthenticated network attackers to recover WireGuard peer credentials b…

CVSS 4.0CRITICAL 9.0 Network No auth No interaction EPSS 0.00414 Published 2026-07-16 Fixed CWE-338