Skip to content
Threat Feed
Subscribe

Product

WireGuard Easy (<= 15.3.0)

1 brief RSS
critical advisory

CVE-2026-63089: WireGuard Easy Weak One-Time Link Token Generation Vulnerability

Unauthenticated network attackers can exploit a cryptographically weak one-time link token generation vulnerability, CVE-2026-63089, in WireGuard Easy through version 15.3.0 by brute-forcing a limited keyspace against the unauthenticated `/cnf/:oneTimeLink` route, allowing them to recover WireGuard peer credentials (PrivateKey and PresharedKey) and impersonate legitimate peers to gain unauthorized VPN access.

WireGuard Easy vulnerability cve weak-cryptography credential-access initial-access web
1r 2t 1c