# cve.now: Ellite

The newest entries naming Ellite as an affected vendor (up to 200), of 27 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-77353](https://cve.now/CVE-2026-77353.md): Wallos: iCalendar Injection via CRLF in Subscription Name/Notes Export (CVSS 4.6)
- [CVE-2026-77352](https://cve.now/CVE-2026-77352.md): Wallos: Authenticated SSRF via per-user SMTP notification host (low-privilege user) (CVSS 4.3)
- [CVE-2026-77348](https://cve.now/CVE-2026-77348.md): Wallos incomplete fix for CVE-2026-33407: unauthenticated httpoxy SSRF still reachable via \`endpoints/payments/search.php\` (CVSS 8.2)
- [CVE-2026-77351](https://cve.now/CVE-2026-77351.md): Wallos: SSRF via Unvalidated User-Level SMTP Host in Email Notification Settings (CVSS 3.5)
- [CVE-2026-61641](https://cve.now/CVE-2026-61641.md): Wallos: OIDC account takeover via email-based account linking without \`email\_verified\` check (CVSS 8.1)
- [CVE-2026-61640](https://cve.now/CVE-2026-61640.md): Wallos: SSRF via OIDC Token/UserInfo URL Configuration (CVSS 8.5)
- [CVE-2026-61639](https://cve.now/CVE-2026-61639.md): Wallos: Zip Slip path traversal in database restore writes files to webroot (CVSS 8.5)
- [CVE-2026-61638](https://cve.now/CVE-2026-61638.md): Wallos: SSRF via Test Email Notification - unvalidated SMTP host/port (CVSS 8.2)
- [CVE-2026-54600](https://cve.now/CVE-2026-54600.md): Wallos: Unauthenticated database replacement via import endpoint on fresh install (CVSS 8.2)
- [CVE-2026-54599](https://cve.now/CVE-2026-54599.md): Wallos: OIDC state parameter never validated — login CSRF / account takeover (CVSS 7.5)
- [CVE-2026-54598](https://cve.now/CVE-2026-54598.md): Missing Authentication for Critical Function in wallos (CVSS 7.5)
- [CVE-2026-50199](https://cve.now/CVE-2026-50199.md): Wallos: Cross-user Fixer/API Layer credential consumption in exchange-rate refresh (CVSS 4.3)
- [CVE-2026-50198](https://cve.now/CVE-2026-50198.md): Wallos: Cross-user subscription cost inference via replacement\_subscription\_id (CVSS 4.3)
- [CVE-2026-41689](https://cve.now/CVE-2026-41689.md): Wallos: Shared local webhook allowlist lets low-privilege users send arbitrary requests to allowlisted internal services (CVSS 6.0)
- [CVE-2026-41688](https://cve.now/CVE-2026-41688.md): Incomplete fix for CVE-2026-33399: SSRF in Wallos (CVSS 7.7)
- [CVE-2026-41687](https://cve.now/CVE-2026-41687.md): Wallos: SSRF CGNAT Bypass in subscription/payments Logo URL — is\_cgnat\_ip() Not Used in Inline Checks (CVSS 4.3)
- [CVE-2026-33417](https://cve.now/CVE-2026-33417.md): Wallos: Password Reset Tokens Never Expire (CVSS 6.5)
- [CVE-2026-33401](https://cve.now/CVE-2026-33401.md): Wallos: Incomplete fix for CVE-2026-30840 - SSRF in AI and notification endpoints bypass ssrf\_helper.php (CVSS 7.1)
- [CVE-2026-33400](https://cve.now/CVE-2026-33400.md): Wallos: Stored cross-site scripting (XSS) vulnerability in the payment method rename endpoint (CVSS 5.4)
- [CVE-2026-33399](https://cve.now/CVE-2026-33399.md): Wallos: SSRF Bypass - Incomplete Fix for CVE-2026-30839/30840 (CVSS 7.7)
- [CVE-2026-33407](https://cve.now/CVE-2026-33407.md): Wallos: SSRF via HTTP Proxy Environment Variable (CVSS 8.3)
- [CVE-2026-30842](https://cve.now/CVE-2026-30842.md): Wallos: Authenticated Missing Authorization Allows Deletion of Other Users’ Uploaded Avatars (CVSS 4.3)
- [CVE-2026-30841](https://cve.now/CVE-2026-30841.md): Wallos: Reflected XSS via unescaped token and email parameters in passwordreset.php (CVSS 6.9)
- [CVE-2026-30840](https://cve.now/CVE-2026-30840.md): Wallos: Server-Side Request Forgery (SSRF) in Notification Testers (CVSS 8.8)
- [CVE-2026-30839](https://cve.now/CVE-2026-30839.md): Wallos: SSRF via webhook test endpoint (CVSS 5.3)
- [CVE-2026-30828](https://cve.now/CVE-2026-30828.md): Wallos: SSRF via url parameter leading to File Traversal (CVSS 8.7)
- [CVE-2026-27479](https://cve.now/CVE-2026-27479.md): Wallos: SSRF via Redirect Bypass in Logo/Icon URL Fetch (CVSS 7.7)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/ellite
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.