PT-2026-26306 · Wgcloud · Wgcloud

Tttlw1024 · Published 2026-03-19 · Updated 2026-03-23 · CVE-2026-30404

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions wgcloud version 3.6.3

Description The backend database management connection test feature contains a server-side request forgery (SSRF) issue. This allows an attacker to make the server send requests to probe the internal network and remotely download malicious files, among other dangerous operations. The vulnerable feature involves server-side requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-30404

Affected Products

Wgcloud

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-30404 · Security Note
• https://github.com/tianshiyeben/wgcloud/issues/98 · Note
• https://github.com/TTTlw1024/qwe/issues/3 · Note
• https://twitter.com/VulmonFeeds/status/2034716136432980181 · Twitter Post
• https://twitter.com/CVEnew/status/2036024252676411415 · Twitter Post