Skip to content
OpenAdvisories

Product · ellite

Wallos

28 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.5
    CVE-2026-77351

    Wallos: SSRF via Unvalidated User-Level SMTP Host in Email Notification Settings

    Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos lets any authenticated user store an arbitrary SMTP host — including private and cloud-metadata IP addresses — in their personal email notification settings,…

    ellite Wallos