SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-52472

CRITICAL · CVSS 9.8 EPSS 0.38% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-21 · Last synced 2026-08-20

CyberRota Analysis

AI-Generated

A critical SQL injection vulnerability in Wgcloud 3.6.4 allows remote attackers to escalate privileges by manipulating the PortInfoMapper.xml file. This flaw poses a significant risk to any organization using this version of Wgcloud, as it could lead to unauthorized access and control over sensitive data. Organizations utilizing Wgcloud should prioritize immediate remediation to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-52472
Severity
CRITICAL
CVSS
9.8
EPSS
0.38%

Original NVD Description

SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the PortInfoMapper.xml file