CVE-2026-15732

WGDashboard Server-Side Request Forgery Vulnerability

A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses.

Affected

WGDashboard

CVSS v3.1 CNA

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.56% chance of exploitation in the next 30 days, 45th percentile

Published

2026-08-06

Updated

2026-08-07

Proof-of-concept exploits (1)

• Stuub/WGDashboard-v4.3.2-Full-Read-SSRF-via-Webhooks-PoC0★ · 2026-04-07

References

• CVE Record
• NVD entry

Related

• CVE-2024-27198
• CVE-2024-27199
• CVE-2024-28955
• CVE-2024-28995
• CVE-2024-29895
• CVE-2024-31848