CVE Intelligence

Wallabag Android-app vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Wallabag Android-app: 1 record(s), with affected versions and fixes.

CVE-2026-82089 High · 8.8 CWE-79 Aug 28, 2026
Cross-site Scripting (XSS) in Wallabag Android-app
The wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView.