VulnerabilityAnalyzed
CVE-2026-30403
There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, which can be used to read any file on the victim's server.
HIGH 7.5EPSS 0.38%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.38%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, which can be used to read any file on the victim's server.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.38% probability · 31th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- wgstart/wgcloud
- Source
- cve@mitre.org
References
- https://github.com/TTTlw1024/qwe/issues/2Exploit, Issue Tracking
- https://github.com/tianshiyeben/wgcloud/issues/97Issue Tracking
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.