What is CVE-2026-30404?

CVE-2026-30404 is a high-severity vulnerability in Wgstart Wgcloud, classified under Server-Side Request Forgery (SSRF). CVSS score: 7.5/10. Published 2026-03-19.

How severe is CVE-2026-30404?

High severity. CVSS v3 base score is 7.5 out of 10.

SSRF in Wgstart Wgcloud

CVE-2026-30404

The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and perform other dangerous operations.

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.003 (16.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Wgstart Wgcloud
N/a — versions n/a

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

References

cve@mitre.org (Issue Tracking)
cve@mitre.org (Exploit, Issue Tracking)

Frequently asked questions

What is CVE-2026-30404?: CVE-2026-30404 is a high-severity vulnerability in Wgstart Wgcloud, classified under Server-Side Request Forgery (SSRF). CVSS score: 7.5/10. Published 2026-03-19.
How severe is CVE-2026-30404?: High severity. CVSS v3 base score is 7.5 out of 10.