CVE-2026-15732
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
A Server-Side Request Forgery (SSRF) vulnerability exists in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses.
Risk Assessment
The risk for the organization includes the possibility of using the server as a proxy to attack internal network resources, which could lead to disclosure of sensitive information or further compromise.
Recommendation
It is recommended to immediately update WGDashboard to the latest version that does not contain this vulnerability, and restrict access to the webhook functionality to trusted users only.
Original NVD description (English source)
A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses.