CVE-2026-30840 — Wallos: Server-Side Request Forgery (SSRF) in Notification Testers
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, there is a server-side request forgery vulnerability in notification testers. This…
Published: 2026-03-07 · CVSS: 8.8 · CVSS 3.0
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, there is a server-side request forgery vulnerability in notification testers. This issue has been patched in version 4.6.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7