CVE-2026-30404
The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability.
Published Mar 19, 2026 · updated Jun 17, 2026 · wgstart wgcloud
The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and perform other dangerous operations.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 19, 2026 · NIST NVD
Detected
The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and perform other dangerous operations.
Jun 17, 2026 · NIST NVD
Updated
The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and perform other dangerous operations.
Affected
- cpe wgstart/wgcloudversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-30404
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-30404
The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and perform other dange
nvd.nist.gov