CVE-2026-30840

N/A

Description

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, there is a server-side request forgery vulnerability in notification testers. This issue has been patched in version 4.6.2.

Details CVE

Score CVSS v3.1N/A

Publie3/7/2026

Derniere modification3/11/2026

Sourcenvd

Observations honeypot0

Produits affectes

wallosapp:wallos

Faiblesses (CWE)

CWE-295CWE-918

References

https://github.com/ellite/Wallos/commit/e8a513591dbbf885966e2ef55c38622785b9060d(security-advisories@github.com)

https://github.com/ellite/Wallos/releases/tag/v4.6.2(security-advisories@github.com)

https://github.com/ellite/Wallos/security/advisories/GHSA-mr2c-prqv-hqm8(security-advisories@github.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.