CVE-2026-82081 - Vulnerability Details - OpenCVE

wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Wallabag	Wallabag

No data.

No data.

References

Link	Providers
https://github.com/FUNFACTOR1/WALLABAG-FULL-DISCLOSURE-Stored-XSS-SSRF-CVSS-8.5-GHSA-q2g2-
https://github.com/wallabag/wallabag/security/advisories/GHSA-q2g2-www6-wf5h

History

Fri, 28 Aug 2026 16:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 28 Aug 2026 15:00:00 +0000

Type	Values Removed	Values Added
Title		SSRF via PDF Export in wallabag 2.x

Fri, 28 Aug 2026 05:00:00 +0000

Type	Values Removed	Values Added
Description		wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export.
First Time appeared		Wallabag Wallabag wallabag
Weaknesses		CWE-918
CPEs		cpe:2.3:a:wallabag:wallabag::::::::
Vendors & Products		Wallabag Wallabag wallabag
References		https://github.com/FUNFACTOR1/WALLABAG-FULL-DISCLOSURE-Stored-XSS-SSRF-CVSS-8.5-GHSA-q2g2- https://github.com/wallabag/wallabag/security/advisories/GHSA-q2g2-www6-wf5h
Metrics		cvssV3_1 `{'score': 6.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-08-28T02:40:33.844Z

Updated: 2026-08-28T15:16:08.971Z

Reserved: 2026-08-28T02:40:33.227Z

Link: CVE-2026-82081

Vulnrichment

Updated: 2026-08-28T15:15:59.967Z

NVD

Status : Received

Published: 2026-08-28T05:16:46.903

Modified: 2026-08-28T16:18:31.363

Link: CVE-2026-82081

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-82081", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "state": "PUBLISHED", "assignerShortName": "mitre", "dateReserved": "2026-08-28T02:40:33.227Z", "datePublished": "2026-08-28T02:40:33.844Z", "dateUpdated": "2026-08-28T15:16:08.971Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://packagist.org", "defaultStatus": "unknown", "packageName": "wallabag/wallabag", "product": "wallabag", "vendor": "wallabag", "versions": [{"lessThanOrEqual": "2.6.14", "status": "affected", "version": "2.0.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "value": "wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-08-28T02:40:33.844Z"}, "references": [{"tags": ["issue-tracking", "third-party-advisory"], "url": "https://github.com/wallabag/wallabag/security/advisories/GHSA-q2g2-www6-wf5h"}, {"url": "https://github.com/FUNFACTOR1/WALLABAG-FULL-DISCLOSURE-Stored-XSS-SSRF-CVSS-8.5-GHSA-q2g2-"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}, "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:wallabag:wallabag:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.0.0", "versionEndIncluding": "2.6.14"}]}]}]}, "adp": [{"references": [{"url": "https://github.com/FUNFACTOR1/WALLABAG-FULL-DISCLOSURE-Stored-XSS-SSRF-CVSS-8.5-GHSA-q2g2-", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-28T15:15:39.899873Z", "id": "CVE-2026-82081", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-28T15:16:08.971Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-82081", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-28T15:15:39.899873Z"}}}], "references": [{"url": "https://github.com/FUNFACTOR1/WALLABAG-FULL-DISCLOSURE-Stored-XSS-SSRF-CVSS-8.5-GHSA-q2g2-", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-28T15:15:59.967Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "wallabag", "product": "wallabag", "versions": [{"status": "affected", "version": "2.0.0", "versionType": "semver", "lessThanOrEqual": "2.6.14"}], "packageName": "wallabag/wallabag", "collectionURL": "https://packagist.org", "defaultStatus": "unknown"}], "references": [{"url": "https://github.com/wallabag/wallabag/security/advisories/GHSA-q2g2-www6-wf5h", "tags": ["issue-tracking", "third-party-advisory"]}, {"url": "https://github.com/FUNFACTOR1/WALLABAG-FULL-DISCLOSURE-Stored-XSS-SSRF-CVSS-8.5-GHSA-q2g2-"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}, "descriptions": [{"lang": "en", "value": "wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wallabag:wallabag:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "2.6.14", "versionStartIncluding": "2.0.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-08-28T02:40:33.844Z"}}}, "cveMetadata": {"cveId": "CVE-2026-82081", "state": "PUBLISHED", "dateUpdated": "2026-08-28T15:16:08.971Z", "dateReserved": "2026-08-28T02:40:33.227Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-08-28T02:40:33.844Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}