CVE-2026-44343
WGDashboard: Critical Vulnerability in 4.3.2
CRITICAL 9.3EPSS 2.4%
WGDashboard is a dashboard for WireGuard VPN. Prior to 4.3.2, there are critical vulnerabilities affecting WGDashboard that, if exploited, could allow unauthorized parties to access the host file system without authentication. This vulnerability is fixed in 4.3.2.
- Affected
- WGDashboard
- CVSS v4.0 GITHUB
- 9.3 CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 2.36% chance of exploitation in the next 30 days, 84th percentile
- Nuclei
- critical · CWE-22
- Published
- 2026-05-12
Nuclei templates (1)
Security advisories
- WGDashboard/WGDashboard/security/advisories/GHSA-rrf5-q4fp-qvgm
- WGDashboard/WGDashboard/commit/b15bbce9bc5554ec379d558f032c730db47fcea2