Skip to content
OpenAdvisories

Vendor

h44z

2 known vulnerabilities.

Products

wg-portal 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-27899

    WireGuard Portal Vulnerable to Privilege Escalation to Admin via User Self-Update

    WireGuard Portal (or wg-portal) is a web-based configuration portal for WireGuard server management. Prior to version 2.1.3, any authenticated non-admin user can become a full administrator by sending a single PUT request to their own user profile endpoint wi…

    h44z wg-portal github.com/h44z/wg-portal Go