CVE-2022-36565: Wampserver

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Incorrect access control in the install directory (C:\Wamp64) of Wamp v3.2.6 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.

Affected products

• Wampserver Wampserver: up to and including 3.2.6

Published 2022-08-30. Last modified 2026-06-17.