CVE-2026-44343
CriticalSummary
WGDashboard, a dashboard for managing WireGuard VPN, prior to version 4.3.2 had critical vulnerabilities that could allow unauthorized parties to access the host file system without authentication.
Risk Assessment
Exploitation of this vulnerability could lead to serious security breaches, including unauthorized access to sensitive data.
Recommendation
It is recommended to update WGDashboard to version 4.3.2 or later to mitigate these critical vulnerabilities.
Other vulnerabilities in WGDashboard
See all- CVE-2026-15734Critical
A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier allows authenticated attackers to execute arbitrary code as root.
- CVE-2026-15733Critical
A Remote Code Execution (RCE) vulnerability exists in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root.
- CVE-2026-15732Critical
A Server-Side Request Forgery (SSRF) vulnerability exists in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses.
Original NVD description (English source)
WGDashboard is a dashboard for WireGuard VPN. Prior to 4.3.2, there are critical vulnerabilities affecting WGDashboard that, if exploited, could allow unauthorized parties to access the host file system without authentication. This vulnerability is fixed in 4.3.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS