CVE-2026-27899
2 advisories.
Go/github.com/h44z/wg-portal CVE-2026-27899: high 8.8, EPSS 0.56%
WireGuard Portal is Vulnerable to Privilege Escalation via User Self-Update to Admin Level
Action: Upgrade github.com/h44z/wg-portal to 2.1.3 or later.
go get github.com/h44z/wg-portal@v2.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.3 | - |
Fixed versions
| 2.1.3 |
Sources
- osv: GHSA-5rmx-256w-8mj9
- https://github.com/h44z/wg-portal/security/advisories/GHSA-5rmx-256w-8mj9
- https://nvd.nist.gov/vuln/detail/CVE-2026-27899
- https://github.com/h44z/wg-portal/commit/fe4485037a25426446ced95050e9498f477bf71d
- https://github.com/h44z/wg-portal
- https://github.com/h44z/wg-portal/releases/tag/v2.1.3
- https://hub.docker.com/layers/wgportal/wg-portal/v2.1.3/images/sha256-39acfab55598a74e561828b8cb639515ddc222d6c884996111f5ef235aba9e7b
CVE-2026-27899 · published · modified · JSON
Go/github.com/h44z/wg-portal CVE-2026-27899: unknown, EPSS 0.56%
WireGuard Portal is Vulnerable to Privilege Escalation via User Self-Update to Admin Level in github.com/h44z/wg-portal
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-4566
- https://github.com/h44z/wg-portal/security/advisories/GHSA-5rmx-256w-8mj9
- https://nvd.nist.gov/vuln/detail/CVE-2026-27899
- https://github.com/h44z/wg-portal/commit/fe4485037a25426446ced95050e9498f477bf71d
- https://github.com/h44z/wg-portal/releases/tag/v2.1.3
- https://hub.docker.com/layers/wgportal/wg-portal/v2.1.3/images/sha256-39acfab55598a74e561828b8cb639515ddc222d6c884996111f5ef235aba9e7b
CVE-2026-27899 · published · modified · JSON