The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and perform other dangerous operations.
Metrics
Affected Vendors & Products
References
History
Fri, 20 Mar 2026 09:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Tianshiyeben
Tianshiyeben wgcloud |
|
| Vendors & Products |
Tianshiyeben
Tianshiyeben wgcloud |
Thu, 19 Mar 2026 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and perform other dangerous operations. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-03-19T15:48:52.924Z
Reserved: 2026-03-04T00:00:00.000Z
Link: CVE-2026-30404
No data.
Status : Received
Published: 2026-03-19T16:16:02.060
Modified: 2026-03-19T16:16:02.060
Link: CVE-2026-30404
No data.