CVE-2026-52472

CriticalCVSS 9.8

Published: 21/07/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

31th percentile - higher than 31% of all known CVEs

SQL injection vulnerability in Wgcloud 3.6.4. A remote attacker can escalate privileges via the PortInfoMapper.xml file.

An attacker can gain unauthorized access to the database and escalate privileges, potentially leading to full compromise of the Wgcloud system.

Update Wgcloud to a version that fixes the SQL injection vulnerability in the PortInfoMapper.xml file.

Original NVD description (English source)

SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the PortInfoMapper.xml file