CVE-2026-15733

WGDashboard Remote Code Execution vulnerability

A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root.

Affected

WGDashboard

CVSS v3.1 CNA

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

10.02% chance of exploitation in the next 30 days, 96th percentile

Nuclei

critical · CWE-78

Published

2026-08-06

Updated

2026-08-07

Proof-of-concept exploits (1)

• Stuub/WGDashboard-v4.3.2-OS-Command-Injection-to-Root-RCE-PoC0★ · 2026-04-07

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-15733.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2024-27198
• CVE-2024-27199
• CVE-2024-28955
• CVE-2024-28995
• CVE-2024-29895
• CVE-2024-31848