Description
A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WGDashboard | WGDashboard | ≤ 4.3.2 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- WGDashboard <= 4.3.2 - Authenticated OS Command Injection /etc/passwd Read http/cves/2026/CVE-2026-15733.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.