CVE-2026-30404

7.5 highEPSS 0.3%

High (7.5) in wgstart wgcloud. EPSS 0.3% chance of exploitation in the next 30 days.

The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and perform other dangerous operations.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2026-03-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wgstart:wgcloud

References

https://github.com/TTTlw1024/qwe/issues/3
https://github.com/tianshiyeben/wgcloud/issues/98

Check your stack JSON