CVE-2026-77353: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos allows authenticated users to inject arbitrary iCalendar properties and events into their exported .ics feed by embedding raw CRLF sequences in subscription names or notes. Because the input...

PT-2026-84046

Name of the Vulnerable Software and Affected Versions Wallos versions prior to 5.0.0 Description Authenticated users can inject arbitrary iCalendar properties and events into exported .ics feeds. This occurs because the input validation layer encodes HTML metacharacters but fails to strip CRLF...

CVE-2026-18717

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:51+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-04 2026-08-28 02:07:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4bpd22y22p 2026-08-31 20:26:27+00:00| seen|...

CVE-2026-77977

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:47+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 00:40:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dcfmboxreko4m 2026-08-28 07:03:58+00:00| seen|...

CVE-2026-77975

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:44+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05...

CVE-2026-73819

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:42+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-31 16:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mufbmp6qrf2e 2026-08-31 18:07:30+00:00| seen|...

CVE-2026-76133

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:40+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-31 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mufc6jjqv72p 2026-08-31 18:07:40+00:00| seen|...

CVE-2026-75548

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:35+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05...

CVE-2026-71187

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:33+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 02:08:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4bqeqavt23 2026-08-29 13:12:09+00:00| seen|...

CVE-2026-73809

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 12:00:53+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mu5cu5ndbv2j 2026-08-28 12:01:02+00:00| seen|...

CVE-2026-77966

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:28+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05...

CVE-2026-76940

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:26+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 02:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4bdixola26...

CVE-2026-75814

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:23+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05...

CVE-2026-76179

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:21+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 02:08:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4bqubl7e2j 2026-08-29 13:40:04+00:00| seen|...

CVE-2026-73125

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:19+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 02:08:20+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4bqmmzmx2c 2026-08-28 16:58:04+00:00| seen|...

CVE-2026-78239

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:12+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01 2026-08-28 00:58:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fkri2bux5ijjh 2026-08-28 02:00:54+00:00| seen|...

CVE-2026-78037

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:10+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01 2026-08-28 01:00:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3vzeug2g3jhib 2026-08-28 02:00:47+00:00| seen|...

CVE-2026-75112

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:08+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-03 2026-08-29 13:15:34+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mu7ximxv7l2v...

Xiiaozet LK100W

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to take control over the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all...

Ebyte NA111-M

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to fully compromise the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all...