PT-2026-26306 · Wgcloud · Wgcloud

Tttlw1024 · Publicado 2026-03-19 · Atualizado 2026-03-23 · CVE-2026-30404

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions wgcloud version 3.6.3

Description The backend database management connection test feature contains a server-side request forgery (SSRF) issue. This allows an attacker to make the server send requests to probe the internal network and remotely download malicious files, among other dangerous operations. The vulnerable feature involves server-side requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2026-30404

Produtos afetados

Wgcloud

Referências · 5

• https://github.com/tianshiyeben/wgcloud/issues/98 · Nota
• https://github.com/TTTlw1024/qwe/issues/3 · Nota
• https://twitter.com/VulmonFeeds/status/2034716136432980181 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2036024252676411415 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-30404 · Nota de Segurança