UBUNTU-CVE-2026-105980: Input Validation
Published Nov 3, 2026
·Updated
Improper input validation in the WireGuard VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.
Affected Software
7 affected components
ubuntu/wireguard*
ubuntu/wireguard*
ubuntu/wireguard*
ubuntu/wireguard*
ubuntu/wireguard*
ubuntu/wireguard*
ubuntu/wireguard*
Event History
Nov 3, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Who is exposed to this issue?
Ubuntu systems using the WireGuard VPN function are potentially exposed. Exploitation requires a remote attacker who already has high privileges.
2
What level of access does an attacker need?
The attacker must be remote and hold high privileges before exploitation. No user interaction is required, and the vulnerability has network attack vector and low attack complexity.
3
What is the potential impact of successful exploitation?
An attacker may inject system commands and execute them with root privileges. This can result in complete compromise of confidentiality, integrity, and availability.