CVE-2026-15734
CRITICAL 9.8EPSS 0.7%
A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary code as root.
- CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.68% chance of exploitation in the next 30 days, 50th percentile
- Published
- 2026-08-06
- Updated
- 2026-08-07
Proof-of-concept exploits (1)
- Stuub/WGDashboard-v4.3.2-SSTI-to-Root-RCE-PoC0★ · 2026-04-07