CVE-2026-15734
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier allows authenticated attackers to execute arbitrary code as root.
Risk Assessment
The risk for the organization includes complete compromise of the server running WGDashboard, which could lead to confidentiality, integrity, and availability breaches, as well as further attacks within the network.
Recommendation
It is recommended to immediately update WGDashboard to the latest version that does not contain this vulnerability, and restrict access to the dashboard to trusted users only.
Original NVD description (English source)
A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary code as root.