NCSC-VD-2602-001-03
Severity Level: High
Reference No.: NCSC-VD-2602-001-03
WireGuard
Description
CVE-2026-27899: A high-severity privilege escalation vulnerability affecting WireGuard Portal (wg-portal). Any authenticated non-admin user can become an admin by sending a single PUT request to their own user profile endpoint with “IsAdmin”: true in the JSON body.
Vulnerabilities
- CVE-2026-27899
A high-severity privilege escalation vulnerability affecting WireGuard Portal (wg-portal). Any authenticated non-admin user can become an admin by sending a single PUT request to their own user profile endpoint with “IsAdmin”: true in the JSON body.