CVE Catalog
CVE-2026-52473
Low risk· EPSS 6%Exploitation Probability (EPSS)
Low risk0.17%
6th percentile - higher than 6% of all known CVEs
Summary
A vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges because the content parameter is directly concatenated to the ProcessBuilder.
Risk Assessment
An attacker can gain elevated privileges in the system, potentially leading to full compromise of the application and server.
Recommendation
Update Wgcloud to a patched version. If not possible, restrict access to the application and implement input validation mechanisms.
Other vulnerabilities in Wgcloud
Original NVD description (English source)
An issue in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the content parameter is directly concatenated to the ProcessBuilder.