MEDIUMVulnerability

CVE-2026-82081

wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export.

Properties

severity
MEDIUM
score
6.4
epss_score
0.00146
cve_id
CVE-2026-82081
signal_observed_at
2026-09-15T21:12:47+00:00
vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
published_at
2026-08-28T05:16:46.903
last_modified
2026-09-09T16:04:24.933
epss_percentile
0.04216

Related Entities (3)

ENRICHED_BY (1)

[Source]FIRST EPSS

HAS_WEAKNESS (1)

[Weakness]Server-Side Request Forgery (SSRF)

DESCRIBED_BY (1)

[Source]NVD

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-82081 — Ninja Signal Threat Intelligence | Ninja Signal