CVE-2026-30828

Wallos <4.6.2 - Path Traversal

Title source: llm

Description

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, the url parameter can be used to retrieve local system files. This issue has been patched in version 4.6.2.

Scores

EPSS 0.0006
EPSS Percentile 17.6%

Classification

CWE
CWE-918 CWE-29 CWE-22
Status draft

Timeline

Published Mar 07, 2026
Tracked Since Mar 07, 2026