PT-2026-26305 · Wgcloud · Wgcloud

Tttlw1024 · CVE-2026-30403 · Published 2026-03-19 · Updated 2026-03-23

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions wgcloud versions prior to 3.6.3

Description An arbitrary file read issue exists in the test connection function of the backend database management component. This allows an attacker to read any file on the affected server.

Recommendations Update to a version later than 3.6.3.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-30403

Affected Products

Wgcloud

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30403.json · Exploit
• 🔥 https://github.com/TTTlw1024/qwe/issues/2 · Exploit
• https://osv.dev/vulnerability/CVE-2026-30403 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-30403 · Security Note
• https://github.com/tianshiyeben/wgcloud/issues/97 · Note
• https://twitter.com/CVEnew/status/2036024251820712368 · Twitter Post
• https://twitter.com/cyberbivash/status/2034703169234538546 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2034690539660906605 · Twitter Post