Ellite Wallos vulnerabilities

• ellite wallos Wallos: iCalendar Injection via CRLF in Subscription Name/Notes Export CVE-2026-77353 4.6 MediumAugust 31, 2026
• ellite wallos Wallos: Authenticated SSRF via per-user SMTP notification host (low-privilege user) CVE-2026-77352 4.3 MediumAugust 31, 2026
• ellite wallos Wallos incomplete fix for CVE-2026-33407: unauthenticated httpoxy SSRF still reachable via `endpoints/payments/search.php` CVE-2026-77348 8.2 HighAugust 31, 2026
• ellite wallos Wallos: SSRF via Unvalidated User-Level SMTP Host in Email Notification Settings CVE-2026-77351 3.5 LowAugust 31, 2026
• ellite wallos Wallos: OIDC account takeover via email-based account linking without `email_verified` check CVE-2026-61641 8.1 HighAugust 31, 2026
• ellite wallos Wallos: SSRF via OIDC Token/UserInfo URL Configuration CVE-2026-61640 8.5 HighAugust 31, 2026
• ellite wallos Wallos: Zip Slip path traversal in database restore writes files to webroot CVE-2026-61639 8.5 HighAugust 31, 2026
• ellite wallos Wallos: SSRF via Test Email Notification - unvalidated SMTP host/port CVE-2026-61638 8.2 HighAugust 31, 2026
• ellite wallos Wallos: Unauthenticated database replacement via import endpoint on fresh install CVE-2026-54600 8.2 HighAugust 31, 2026
• ellite wallos Wallos: OIDC state parameter never validated — login CSRF / account takeover CVE-2026-54599 7.5 HighAugust 31, 2026
• ellite wallos Missing Authentication for Critical Function in wallos CVE-2026-54598 7.5 HighAugust 31, 2026
• ellite wallos Wallos: Cross-user Fixer/API Layer credential consumption in exchange-rate refresh CVE-2026-50199 4.3 MediumAugust 31, 2026
• ellite wallos Wallos: Cross-user subscription cost inference via replacement_subscription_id CVE-2026-50198 4.3 MediumAugust 31, 2026
• ellite wallos Wallos: Shared local webhook allowlist lets low-privilege users send arbitrary requests to allowlisted internal services CVE-2026-41689 6.0 MediumMay 7, 2026
• ellite wallos Incomplete fix for CVE-2026-33399: SSRF in Wallos CVE-2026-41688 7.7 HighMay 7, 2026
• ellite wallos Wallos: SSRF CGNAT Bypass in subscription/payments Logo URL — is_cgnat_ip() Not Used in Inline Checks CVE-2026-41687 4.3 MediumMay 7, 2026
• ellite wallos Wallos: Password Reset Tokens Never Expire CVE-2026-33417 6.5 MediumMarch 24, 2026
• ellite wallos Wallos: Incomplete fix for CVE-2026-30840 - SSRF in AI and notification endpoints bypass ssrf_helper.php CVE-2026-33401 7.1 HighMarch 24, 2026
• ellite wallos Wallos: Stored cross-site scripting (XSS) vulnerability in the payment method rename endpoint CVE-2026-33400 5.4 MediumMarch 24, 2026
• ellite wallos Wallos: SSRF Bypass - Incomplete Fix for CVE-2026-30839/30840 CVE-2026-33399 7.7 HighMarch 24, 2026
• ellite wallos Wallos: SSRF via HTTP Proxy Environment Variable CVE-2026-33407 8.3 HighMarch 24, 2026
• ellite wallos Wallos: Authenticated Missing Authorization Allows Deletion of Other Users’ Uploaded Avatars CVE-2026-30842 4.3 MediumMarch 7, 2026
• ellite wallos Wallos: Reflected XSS via unescaped token and email parameters in passwordreset.php CVE-2026-30841 6.9 MediumMarch 7, 2026
• ellite wallos Wallos: Server-Side Request Forgery (SSRF) in Notification Testers CVE-2026-30840 8.8 HighMarch 7, 2026
• ellite wallos Wallos: SSRF via webhook test endpoint CVE-2026-30839 5.3 MediumMarch 7, 2026
• ellite wallos Wallos: SSRF via url parameter leading to File Traversal CVE-2026-30828 8.7 HighMarch 7, 2026
• ellite wallos Wallos: SSRF via Redirect Bypass in Logo/Icon URL Fetch CVE-2026-27479 7.7 HighFebruary 21, 2026
• ellite wallos Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to ... CVE-2024-29320 8.1 HighApril 30, 2024
• ellite wallos Wallos 0.9 is vulnerable to Cross Site Scripting (XSS) in all text-based input fields without... CVE-2024-22776 4.7 MediumFebruary 23, 2024