CVE-2026-30840

概要

参考情報

• ellite/Wallos commit e8a5135 · Patch
• ellite/Wallos release v4.6.2 · Release Notes
• ellite/Wallos security advisory · Exploit

wallos のその他の脆弱性

• CVE-2026-33417高 7.1Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.2, password reset tokens in Wallos never expire.…
• CVE-2026-33407緊急 9.1Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.0, Wallos endpoints/logos/search.php accepts HTT…
• CVE-2026-33401中 6.5Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.0, the patch introduced in commit e8a513591 (CVE…
• CVE-2026-33400中 5.4Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.0, a stored cross-site scripting (XSS) vulnerabi…
• CVE-2026-33399高 7.7Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.7.0, the SSRF fix applied in version 4.6.2 for CVE…