Critical (9.8). EPSS 10% chance of exploitation in the next 30 days.
A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root.
Severity
CVSS 3.1
9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
10% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)