h44z wg-portal

• CVE-2026-54551 Medium 4.3 WireGuard Portal: Authenticated WebSocket /api/v0/ws broadcasts all peers' and interfaces' traffic stats to every user (missing per-user authorization) 0.4%
• CVE-2026-27899 High 8.8 WireGuard Portal Vulnerable to Privilege Escalation to Admin via User Self-Update 0.3%