by Kastro
Paper/Archive/CVE-2026-44343

CVE-2026-44343

WGDashboard WGDashboard — WGDashboard: Critical Vulnerability in 4.3.2

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 78.8.788 × 2015.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

WGDashboard is a dashboard for WireGuard VPN. Prior to 4.3.2, there are critical vulnerabilities affecting WGDashboard that, if exploited, could allow unauthorized parties to access the host file system without authentication. This vulnerability is fixed in 4.3.2.

Affected

ProductAffectedFixed inSource
WGDashboard< 4.3.2–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GitHub_M (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/WGDashboard/WGDashboard/security/advisories/GHSA-rrf5-q4fp-qvgmrefgithub.com/WGDashboard/WGDashboard/commit/b15bbce9bc5554ec379d558f032c730db47fcea2