CVE-2026-15732 describes an SSRF vulnerability in WGDashboard versions up to and including 4.2.3. The webhook feature permits authenticated users to craft arbitrary HTTP requests that the server will execute, returning the responses to the attacker. This flaw could allow attackers to interact with internal or protected network resources via the vulnerable server. There is no CVSS score or detailed vendor advisory available to clarify the extent of impact or remediation status.

Authenticated attackers can leverage the webhook functionality to make arbitrary HTTP requests from the server, potentially accessing internal services or sensitive data not intended to be exposed externally. The exact impact depends on the internal network configuration and the privileges of the WGDashboard server. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the webhook functionality to trusted users only and monitor for suspicious activity related to webhook usage.