Approved changes feed: RSS · Atom

cpe:2.3:a:wgstart:wgcloud:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWgstart (10bffbd7-4a19-5b12-a835-ed8a96fa34be)
ProductWgcloud (2f9ba6aa-6320-5049-8673-9157a7360b1b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-30404 vulnerable 2026-06-08 07:57:14.044733 Details available
The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and perform other dangerous operations.
Published: 2026-03-19T00:00:00.000Z
Updated: 2026-03-24T01:10:21.428Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-30403 vulnerable 2026-06-08 07:57:14.044244 Details available
There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, which can be used to read any file on the victim's server.
Published: 2026-03-19T00:00:00.000Z
Updated: 2026-03-24T01:14:09.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-30402 vulnerable 2026-06-08 07:57:14.043739 Details available
An issue in wgcloud v.2.3.7 and before allows a remote attacker to execute arbitrary code via the test connection function
Published: 2026-03-19T00:00:00.000Z
Updated: 2026-03-19T15:57:39.690Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.