CVE-2026-27899

WireGuard Portal or wg-portal is a web-based configuration portal for WireGuard server management. Prior to version 2.1.3, any authenticated non-admin user can become a full administrator by sending a single PUT request to their own user profile endpoint with "IsAdmin": true in the JSON body. Aft...

CVE-2026-27899

creationtimestamp| type| source ---|---|--- 2026-02-26 04:53:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfqfn3nav62k 2026-02-26 06:22:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqkmizhno2s 2026-02-27 04:40:18+00:00| seen|...

CVE-2026-27899

WireGuard Portal or wg-portal is a web-based configuration portal for WireGuard server management. Prior to version 2.1.3, any authenticated non-admin user can become a full administrator by sending a single PUT request to their own user profile endpoint with "IsAdmin": true in the JSON body. Aft...