h44z
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| wg-portal | 2 | – | Sep 17, 2026 |
Exploited and recent CVEs
- CVE-2026-54551 WireGuard Portal: Authenticated WebSocket /api/v0/ws broadcasts all peers' and interfaces' traffic stats to every user (missing per-user authorization) 0.4%
- CVE-2026-27899 WireGuard Portal Vulnerable to Privilege Escalation to Admin via User Self-Update 0.3%