CVE-2026-15732CWE-918ssrf

CVE-2026-15732

Critical · published August 7, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00556 · 45.7th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-08-07T02:16Z
References (3)
https://github.com/Stuub/WGDashboard-v4.3.2-Full-Read-SSRF-via-Webhooks-PoC · [email protected]https://github.com/WGDashboard/WGDashboard · [email protected]https://github.com/Stuub/WGDashboard-v4.3.2-Full-Read-SSRF-via-Webhooks-PoC · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 06 AUG 19:59Z
    WGDashboard Server-Side Request Forgery Vulnerability
    cvelistv5