انتقل إلى المحتوى الرئيسي
English
logo
مستوى الخطورة: عالية

الرقم المرجعي: NCSC-VD-2602-001-03

WireGuard

الوصف

CVE-2026-27899: A high-severity privilege escalation vulnerability affecting WireGuard Portal (wg-portal). Any authenticated non-admin user can become an admin by sending a single PUT request to their own user profile endpoint with “IsAdmin”: true in the JSON body.

الثغرات

  • CVE-2026-27899

    A high-severity privilege escalation vulnerability affecting WireGuard Portal (wg-portal). Any authenticated non-admin user can become an admin by sending a single PUT request to their own user profile endpoint with “IsAdmin”: true in the JSON body.

المراجع