CVE-2026-30404

The wgcloud distributed server monitoring and operation system (version 3.6.3 ) is vulnerable to a Server-Side Request Forgery (SSRF) in its backend database management connection test feature. An attacker can exploit this to force the server to send requests to probe internal networks, remotely ...

CVE-2026-30402

A critical vulnerability in wgcloud (versions v.2.3.7 and before ) allows a remote attacker to achieve arbitrary code execution . The root cause is identified as a defect within the test connection function . The vulnerability has been reported as critical , with a CVSS 3.1 score of 9.8 , and sig...

CVE-2026-30403

The wgcloud distributed server monitoring and operation system, versions v3.6.3 and before , is affected by an arbitrary file read vulnerability. This flaw exists within the test connection function of the backend database management component, which allows an attacker to read any file on the vic...