MEDIUM 6.4 NVD

CVE-2026-82081

wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export.

References

https://github.com/FUNFACTOR1/WALLABAG-FULL-DISCLOSURE-Stored-XSS-SSRF-CVSS-8.5-GHSA-q2g2-
https://github.com/wallabag/wallabag/security/advisories/GHSA-q2g2-www6-wf5h

Published: 2026-08-28 · Source: NVD · Feed updated: 2026-08-28

This medium severity vulnerability with a CVSS score of 6.4 was published on 2026-08-28 via NVD.

vulnfeed aggregates 11380 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.