HarborGuard / CVE
Back to search
HIGHCVE-2026-30840Published Modified CNA GitHub_M

CVE-2026-30840: Wallos: Server-Side Request Forgery (SSRF) in Notification Testers

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, there is a server-side request forgery vulnerability in notification testers. This issue has been patched in version 4.6.2.

Metrics

CVSS v3.0
8.8
Severity
HIGH
Fixed in
—
Affected Products
1
Affected packages
  • ellite / Wallos
    < 4.6.2
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
CVE-2026-30840: Wallos: Server-Side Request Forgery (SSRF) in Notification Testers | HarborGuard CVE