The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and perform other dangerous operations.

Project Subscriptions

Vendors Products
Tianshiyeben Subscribe
Wgcloud Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Fri, 20 Mar 2026 09:00:00 +0000

Type Values Removed Values Added
First Time appeared Tianshiyeben
Tianshiyeben wgcloud
Vendors & Products Tianshiyeben
Tianshiyeben wgcloud

Thu, 19 Mar 2026 16:00:00 +0000

Type Values Removed Values Added
Description The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and perform other dangerous operations.
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-03-19T15:48:52.924Z

Reserved: 2026-03-04T00:00:00.000Z

Link: CVE-2026-30404

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-03-19T16:16:02.060

Modified: 2026-03-19T16:16:02.060

Link: CVE-2026-30404

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-03-20T08:58:07Z

Weaknesses

No weakness.