Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, the url parameter can be used to retrieve local system files. This issue has been patched in version 4.6.2.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-07 | 2 | Disclosure2 |
| 2026-03-12 | 1 | General1 |
CVE-2026-30828 (CVSS:8.7, HIGH) is Analyzed. Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, the url parameter can be ..https://nvd.nist.gov/vuln/detail/CVE-2026-30828 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The text briefly notes the CVE and its severity but provides no additional technical, exploit, or mitigation information.
CVE-2026-30828 Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, the url parameter can be used to retrieve local system files. This issu… https://www.cve.org/CVERecord?id=CVE-2026-30828
Post summary
CVE-2026-30828 compromises Wallos by allowing local file retrieval via the url parameter before version 4.6.2, which has been addressed in that release.
CVE-2026-30828 Local File Disclosure Vulnerability in Wallos Subscription Tracker Before 4.6.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30828
Post summary
This text announces a local file disclosure vulnerability, CVE-2026-30828, impacting Wallos Subscription Tracker versions older than 4.6.2.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wallosapp | wallos | - | - | - |