Approved changes feed: RSS · Atom

cpe:2.3:a:wgdashboard:wgdashboard:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWgdashboard (9daa19be-601c-5e6d-b9c9-172466072423)
ProductWgdashboard (39995aee-a5e0-54b0-b09e-03d451ee2476)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
pkg:github/wgdashboard/wgdashboard purl2cpe 2026-07-28 16:40:48.392119

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-15732 vulnerable 2026-09-16 04:33:06.809149 WGDashboard Server-Side Request Forgery Vulnerability
A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses.
Published: 2026-08-06T19:59:32.858Z
Updated: 2026-08-07T16:22:33.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15733 vulnerable 2026-09-16 04:33:06.706989 WGDashboard Remote Code Execution vulnerability
A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root.
Published: 2026-08-06T20:00:26.421Z
Updated: 2026-08-07T17:58:59.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15734 vulnerable 2026-09-16 04:33:06.196868 WGDashboard Server-Side Template Injection vulnerability
A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary code as root.
Published: 2026-08-06T20:00:57.434Z
Updated: 2026-08-07T16:39:41.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44343 vulnerable 2026-06-08 08:05:10.973979 WGDashboard: Critical Vulnerability in 4.3.2
WGDashboard is a dashboard for WireGuard VPN. Prior to 4.3.2, there are critical vulnerabilities affecting WGDashboard that, if exploited, could allow unauthorized parties to access the host file system without authentication. This vulnerability is fixed in 4.3.2.
Published: 2026-05-12T16:39:46.817Z
Updated: 2026-05-12T19:02:27.170Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.