CVE-2026-30403

PoC —

CVSS 3.1

7.5 high

EPSS

<1%p31

Published

Mar 19, 2026 (Mar 19, 2026)

Modified

Jun 17, 2026

Description

There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, which can be used to read any file on the victim's server.

Vendors: wgstart
Products: wgcloud
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.