PT-2026-26305 · Wgcloud · Wgcloud

Tttlw1024 · Publicado 2026-03-19 · Atualizado 2026-03-23 · CVE-2026-30403

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions wgcloud versions prior to 3.6.3

Description An arbitrary file read issue exists in the test connection function of the backend database management component. This allows an attacker to read any file on the affected server.

Recommendations Update to a version later than 3.6.3.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-30403

Produtos afetados

Wgcloud

Referências · 6

• https://github.com/tianshiyeben/wgcloud/issues/97 · Nota
• https://twitter.com/VulmonFeeds/status/2034690539660906605 · Publicação no Twitter
• https://twitter.com/cyberbivash/status/2034703169234538546 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2036024251820712368 · Publicação no Twitter
• https://github.com/TTTlw1024/qwe/issues/2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-30403 · Nota de Segurança