{
    "document": {
        "category": "csaf_base",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE"
            }
        },
        "lang": "en",
        "notes": [
            {
                "category": "legal_disclaimer",
                "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
            }
        ],
        "publisher": {
            "category": "coordinator",
            "contact_details": "cert@ncsc.nl",
            "name": "National Cyber Security Centre",
            "namespace": "https://www.ncsc.nl/"
        },
        "title": "CVE-2026-27479",
        "tracking": {
            "current_release_date": "2026-03-29T05:46:18.858028Z",
            "generator": {
                "date": "2026-02-17T15:00:00Z",
                "engine": {
                    "name": "V.E.L.M.A",
                    "version": "1.7"
                }
            },
            "id": "CVE-2026-27479",
            "initial_release_date": "2026-02-21T08:38:43.942570Z",
            "revision_history": [
                {
                    "date": "2026-02-21T08:38:43.942570Z",
                    "number": "1",
                    "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (3).| CWES updated (1)."
                },
                {
                    "date": "2026-02-21T08:38:47.768353Z",
                    "number": "2",
                    "summary": "NCSC Score created."
                },
                {
                    "date": "2026-02-21T09:24:47.164653Z",
                    "number": "3",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (3).| CWES updated (1)."
                },
                {
                    "date": "2026-02-21T09:24:48.654103Z",
                    "number": "4",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-02-21T14:14:38.950671Z",
                    "number": "5",
                    "summary": "Source created.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-02-21T14:14:41.299641Z",
                    "number": "6",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-02-21T15:35:14.221772Z",
                    "number": "7",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-02-22T00:25:02.222870Z",
                    "number": "8",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (141).| Products created (42).| References created (5).| CWES updated (1)."
                },
                {
                    "date": "2026-02-24T15:26:51.795765Z",
                    "number": "9",
                    "summary": "Products created (1).| Product Identifiers created (1).| Exploits created (1)."
                },
                {
                    "date": "2026-02-24T15:26:54.707120Z",
                    "number": "10",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-02-24T19:59:31.097558Z",
                    "number": "11",
                    "summary": "Unknown change."
                },
                {
                    "date": "2026-02-24T19:59:32.835969Z",
                    "number": "12",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-02-27T04:28:54.156247Z",
                    "number": "13",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-20T09:40:56.588994Z",
                    "number": "14",
                    "summary": "Source connected.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-03-29T05:45:45.878088Z",
                    "number": "15",
                    "summary": "NCSC Score updated."
                }
            ],
            "status": "interim",
            "version": "15"
        }
    },
    "product_tree": {
        "branches": [
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/<4.6.1",
                                "product": {
                                    "name": "vers:unknown/<4.6.1",
                                    "product_id": "CSAFPID-5657914"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Wallos"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.0.0",
                                "product": {
                                    "name": "vers:unknown/v1.0.0",
                                    "product_id": "CSAFPID-3620044"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.0.1",
                                "product": {
                                    "name": "vers:unknown/v1.0.1",
                                    "product_id": "CSAFPID-3620045"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.1.0",
                                "product": {
                                    "name": "vers:unknown/v1.1.0",
                                    "product_id": "CSAFPID-3620046"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.10.0",
                                "product": {
                                    "name": "vers:unknown/v1.10.0",
                                    "product_id": "CSAFPID-3620047"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.11.0",
                                "product": {
                                    "name": "vers:unknown/v1.11.0",
                                    "product_id": "CSAFPID-3620048"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.11.1",
                                "product": {
                                    "name": "vers:unknown/v1.11.1",
                                    "product_id": "CSAFPID-3620049"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.11.2",
                                "product": {
                                    "name": "vers:unknown/v1.11.2",
                                    "product_id": "CSAFPID-3620050"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.11.3",
                                "product": {
                                    "name": "vers:unknown/v1.11.3",
                                    "product_id": "CSAFPID-3620051"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.12.0",
                                "product": {
                                    "name": "vers:unknown/v1.12.0",
                                    "product_id": "CSAFPID-3620052"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.12.1",
                                "product": {
                                    "name": "vers:unknown/v1.12.1",
                                    "product_id": "CSAFPID-3620053"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.13.0",
                                "product": {
                                    "name": "vers:unknown/v1.13.0",
                                    "product_id": "CSAFPID-3620054"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.14.0",
                                "product": {
                                    "name": "vers:unknown/v1.14.0",
                                    "product_id": "CSAFPID-3620055"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.14.1",
                                "product": {
                                    "name": "vers:unknown/v1.14.1",
                                    "product_id": "CSAFPID-3620056"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.15.0",
                                "product": {
                                    "name": "vers:unknown/v1.15.0",
                                    "product_id": "CSAFPID-3620057"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.15.1",
                                "product": {
                                    "name": "vers:unknown/v1.15.1",
                                    "product_id": "CSAFPID-3620058"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.15.2",
                                "product": {
                                    "name": "vers:unknown/v1.15.2",
                                    "product_id": "CSAFPID-3620059"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.15.3",
                                "product": {
                                    "name": "vers:unknown/v1.15.3",
                                    "product_id": "CSAFPID-3654104"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.16.0",
                                "product": {
                                    "name": "vers:unknown/v1.16.0",
                                    "product_id": "CSAFPID-3654105"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.16.1",
                                "product": {
                                    "name": "vers:unknown/v1.16.1",
                                    "product_id": "CSAFPID-3654106"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.16.2",
                                "product": {
                                    "name": "vers:unknown/v1.16.2",
                                    "product_id": "CSAFPID-3654107"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.16.3",
                                "product": {
                                    "name": "vers:unknown/v1.16.3",
                                    "product_id": "CSAFPID-3654108"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.17.0",
                                "product": {
                                    "name": "vers:unknown/v1.17.0",
                                    "product_id": "CSAFPID-3654109"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.17.1",
                                "product": {
                                    "name": "vers:unknown/v1.17.1",
                                    "product_id": "CSAFPID-3654110"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.17.2",
                                "product": {
                                    "name": "vers:unknown/v1.17.2",
                                    "product_id": "CSAFPID-3654111"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.17.3",
                                "product": {
                                    "name": "vers:unknown/v1.17.3",
                                    "product_id": "CSAFPID-3654112"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.18.0",
                                "product": {
                                    "name": "vers:unknown/v1.18.0",
                                    "product_id": "CSAFPID-3654113"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.18.1",
                                "product": {
                                    "name": "vers:unknown/v1.18.1",
                                    "product_id": "CSAFPID-3654114"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.18.2",
                                "product": {
                                    "name": "vers:unknown/v1.18.2",
                                    "product_id": "CSAFPID-3654115"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.18.3",
                                "product": {
                                    "name": "vers:unknown/v1.18.3",
                                    "product_id": "CSAFPID-3654116"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.19.0",
                                "product": {
                                    "name": "vers:unknown/v1.19.0",
                                    "product_id": "CSAFPID-3654117"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.2.0",
                                "product": {
                                    "name": "vers:unknown/v1.2.0",
                                    "product_id": "CSAFPID-3620060"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.20.0",
                                "product": {
                                    "name": "vers:unknown/v1.20.0",
                                    "product_id": "CSAFPID-3654118"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.20.1",
                                "product": {
                                    "name": "vers:unknown/v1.20.1",
                                    "product_id": "CSAFPID-3654119"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.20.2",
                                "product": {
                                    "name": "vers:unknown/v1.20.2",
                                    "product_id": "CSAFPID-3654120"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.21.0",
                                "product": {
                                    "name": "vers:unknown/v1.21.0",
                                    "product_id": "CSAFPID-3654121"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.21.1",
                                "product": {
                                    "name": "vers:unknown/v1.21.1",
                                    "product_id": "CSAFPID-3654122"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.22.0",
                                "product": {
                                    "name": "vers:unknown/v1.22.0",
                                    "product_id": "CSAFPID-3654123"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.23.0",
                                "product": {
                                    "name": "vers:unknown/v1.23.0",
                                    "product_id": "CSAFPID-3654124"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.24.0",
                                "product": {
                                    "name": "vers:unknown/v1.24.0",
                                    "product_id": "CSAFPID-3654125"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.25.0",
                                "product": {
                                    "name": "vers:unknown/v1.25.0",
                                    "product_id": "CSAFPID-3654126"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.25.1",
                                "product": {
                                    "name": "vers:unknown/v1.25.1",
                                    "product_id": "CSAFPID-3654127"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.26.0",
                                "product": {
                                    "name": "vers:unknown/v1.26.0",
                                    "product_id": "CSAFPID-3654128"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.26.1",
                                "product": {
                                    "name": "vers:unknown/v1.26.1",
                                    "product_id": "CSAFPID-3654129"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.26.2",
                                "product": {
                                    "name": "vers:unknown/v1.26.2",
                                    "product_id": "CSAFPID-3654130"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.27.0",
                                "product": {
                                    "name": "vers:unknown/v1.27.0",
                                    "product_id": "CSAFPID-3654131"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.27.1",
                                "product": {
                                    "name": "vers:unknown/v1.27.1",
                                    "product_id": "CSAFPID-3654132"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.27.2",
                                "product": {
                                    "name": "vers:unknown/v1.27.2",
                                    "product_id": "CSAFPID-3654133"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.28.0",
                                "product": {
                                    "name": "vers:unknown/v1.28.0",
                                    "product_id": "CSAFPID-3654134"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.29.0",
                                "product": {
                                    "name": "vers:unknown/v1.29.0",
                                    "product_id": "CSAFPID-3654135"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.29.1",
                                "product": {
                                    "name": "vers:unknown/v1.29.1",
                                    "product_id": "CSAFPID-3654136"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.3.0",
                                "product": {
                                    "name": "vers:unknown/v1.3.0",
                                    "product_id": "CSAFPID-3620061"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.3.1",
                                "product": {
                                    "name": "vers:unknown/v1.3.1",
                                    "product_id": "CSAFPID-3620062"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.4.0",
                                "product": {
                                    "name": "vers:unknown/v1.4.0",
                                    "product_id": "CSAFPID-3620063"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.4.1",
                                "product": {
                                    "name": "vers:unknown/v1.4.1",
                                    "product_id": "CSAFPID-3620064"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.5.0",
                                "product": {
                                    "name": "vers:unknown/v1.5.0",
                                    "product_id": "CSAFPID-3620065"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.6.0",
                                "product": {
                                    "name": "vers:unknown/v1.6.0",
                                    "product_id": "CSAFPID-3620066"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.7.0",
                                "product": {
                                    "name": "vers:unknown/v1.7.0",
                                    "product_id": "CSAFPID-3620067"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.8.0",
                                "product": {
                                    "name": "vers:unknown/v1.8.0",
                                    "product_id": "CSAFPID-3620068"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.8.1",
                                "product": {
                                    "name": "vers:unknown/v1.8.1",
                                    "product_id": "CSAFPID-3620069"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.8.2",
                                "product": {
                                    "name": "vers:unknown/v1.8.2",
                                    "product_id": "CSAFPID-3620070"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.8.3",
                                "product": {
                                    "name": "vers:unknown/v1.8.3",
                                    "product_id": "CSAFPID-3620071"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.9.0",
                                "product": {
                                    "name": "vers:unknown/v1.9.0",
                                    "product_id": "CSAFPID-3620072"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.9.1",
                                "product": {
                                    "name": "vers:unknown/v1.9.1",
                                    "product_id": "CSAFPID-3620073"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.0.0",
                                "product": {
                                    "name": "vers:unknown/v2.0.0",
                                    "product_id": "CSAFPID-3654137"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.1.0",
                                "product": {
                                    "name": "vers:unknown/v2.1.0",
                                    "product_id": "CSAFPID-3654138"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.10.0",
                                "product": {
                                    "name": "vers:unknown/v2.10.0",
                                    "product_id": "CSAFPID-3654139"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.11.0",
                                "product": {
                                    "name": "vers:unknown/v2.11.0",
                                    "product_id": "CSAFPID-3654140"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.11.1",
                                "product": {
                                    "name": "vers:unknown/v2.11.1",
                                    "product_id": "CSAFPID-3654141"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.11.2",
                                "product": {
                                    "name": "vers:unknown/v2.11.2",
                                    "product_id": "CSAFPID-3654142"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.12.0",
                                "product": {
                                    "name": "vers:unknown/v2.12.0",
                                    "product_id": "CSAFPID-3654143"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.13.0",
                                "product": {
                                    "name": "vers:unknown/v2.13.0",
                                    "product_id": "CSAFPID-3654144"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.14.0",
                                "product": {
                                    "name": "vers:unknown/v2.14.0",
                                    "product_id": "CSAFPID-3654145"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.14.1",
                                "product": {
                                    "name": "vers:unknown/v2.14.1",
                                    "product_id": "CSAFPID-3654146"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.14.2",
                                "product": {
                                    "name": "vers:unknown/v2.14.2",
                                    "product_id": "CSAFPID-3654147"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.15.0",
                                "product": {
                                    "name": "vers:unknown/v2.15.0",
                                    "product_id": "CSAFPID-3654148"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.16.0",
                                "product": {
                                    "name": "vers:unknown/v2.16.0",
                                    "product_id": "CSAFPID-3654149"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.16.1",
                                "product": {
                                    "name": "vers:unknown/v2.16.1",
                                    "product_id": "CSAFPID-3654150"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.17.0",
                                "product": {
                                    "name": "vers:unknown/v2.17.0",
                                    "product_id": "CSAFPID-3654151"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.18.0",
                                "product": {
                                    "name": "vers:unknown/v2.18.0",
                                    "product_id": "CSAFPID-3654152"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.19.0",
                                "product": {
                                    "name": "vers:unknown/v2.19.0",
                                    "product_id": "CSAFPID-3654153"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.19.1",
                                "product": {
                                    "name": "vers:unknown/v2.19.1",
                                    "product_id": "CSAFPID-3654154"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.19.2",
                                "product": {
                                    "name": "vers:unknown/v2.19.2",
                                    "product_id": "CSAFPID-3654155"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.19.3",
                                "product": {
                                    "name": "vers:unknown/v2.19.3",
                                    "product_id": "CSAFPID-3654156"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.2.0",
                                "product": {
                                    "name": "vers:unknown/v2.2.0",
                                    "product_id": "CSAFPID-3654157"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.20.0",
                                "product": {
                                    "name": "vers:unknown/v2.20.0",
                                    "product_id": "CSAFPID-3654158"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.20.1",
                                "product": {
                                    "name": "vers:unknown/v2.20.1",
                                    "product_id": "CSAFPID-3654159"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.21.0",
                                "product": {
                                    "name": "vers:unknown/v2.21.0",
                                    "product_id": "CSAFPID-3654160"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.21.1",
                                "product": {
                                    "name": "vers:unknown/v2.21.1",
                                    "product_id": "CSAFPID-3654161"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.21.2",
                                "product": {
                                    "name": "vers:unknown/v2.21.2",
                                    "product_id": "CSAFPID-3654162"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.21.3",
                                "product": {
                                    "name": "vers:unknown/v2.21.3",
                                    "product_id": "CSAFPID-3654163"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.22.0",
                                "product": {
                                    "name": "vers:unknown/v2.22.0",
                                    "product_id": "CSAFPID-3654164"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.22.1",
                                "product": {
                                    "name": "vers:unknown/v2.22.1",
                                    "product_id": "CSAFPID-3654165"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.23.0",
                                "product": {
                                    "name": "vers:unknown/v2.23.0",
                                    "product_id": "CSAFPID-3654166"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.23.1",
                                "product": {
                                    "name": "vers:unknown/v2.23.1",
                                    "product_id": "CSAFPID-3654167"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.23.2",
                                "product": {
                                    "name": "vers:unknown/v2.23.2",
                                    "product_id": "CSAFPID-3654168"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.24.0",
                                "product": {
                                    "name": "vers:unknown/v2.24.0",
                                    "product_id": "CSAFPID-3654169"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.24.1",
                                "product": {
                                    "name": "vers:unknown/v2.24.1",
                                    "product_id": "CSAFPID-3654170"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.25.0",
                                "product": {
                                    "name": "vers:unknown/v2.25.0",
                                    "product_id": "CSAFPID-3654171"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.26.0",
                                "product": {
                                    "name": "vers:unknown/v2.26.0",
                                    "product_id": "CSAFPID-3654172"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.27.0",
                                "product": {
                                    "name": "vers:unknown/v2.27.0",
                                    "product_id": "CSAFPID-3654173"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.27.1",
                                "product": {
                                    "name": "vers:unknown/v2.27.1",
                                    "product_id": "CSAFPID-3654174"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.27.2",
                                "product": {
                                    "name": "vers:unknown/v2.27.2",
                                    "product_id": "CSAFPID-3654175"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.27.3",
                                "product": {
                                    "name": "vers:unknown/v2.27.3",
                                    "product_id": "CSAFPID-3654176"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.28.0",
                                "product": {
                                    "name": "vers:unknown/v2.28.0",
                                    "product_id": "CSAFPID-3654177"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.29.0",
                                "product": {
                                    "name": "vers:unknown/v2.29.0",
                                    "product_id": "CSAFPID-3654178"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.29.1",
                                "product": {
                                    "name": "vers:unknown/v2.29.1",
                                    "product_id": "CSAFPID-3654179"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.29.2",
                                "product": {
                                    "name": "vers:unknown/v2.29.2",
                                    "product_id": "CSAFPID-3654180"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.3.0",
                                "product": {
                                    "name": "vers:unknown/v2.3.0",
                                    "product_id": "CSAFPID-3654181"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.30.0",
                                "product": {
                                    "name": "vers:unknown/v2.30.0",
                                    "product_id": "CSAFPID-3654182"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.30.1",
                                "product": {
                                    "name": "vers:unknown/v2.30.1",
                                    "product_id": "CSAFPID-3654183"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.31.0",
                                "product": {
                                    "name": "vers:unknown/v2.31.0",
                                    "product_id": "CSAFPID-3654184"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.31.1",
                                "product": {
                                    "name": "vers:unknown/v2.31.1",
                                    "product_id": "CSAFPID-3654185"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.32.0",
                                "product": {
                                    "name": "vers:unknown/v2.32.0",
                                    "product_id": "CSAFPID-3654186"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.33.0",
                                "product": {
                                    "name": "vers:unknown/v2.33.0",
                                    "product_id": "CSAFPID-3654187"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.33.1",
                                "product": {
                                    "name": "vers:unknown/v2.33.1",
                                    "product_id": "CSAFPID-3654188"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.34.0",
                                "product": {
                                    "name": "vers:unknown/v2.34.0",
                                    "product_id": "CSAFPID-3654189"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.35.0",
                                "product": {
                                    "name": "vers:unknown/v2.35.0",
                                    "product_id": "CSAFPID-3654190"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.36.0",
                                "product": {
                                    "name": "vers:unknown/v2.36.0",
                                    "product_id": "CSAFPID-3654191"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.36.1",
                                "product": {
                                    "name": "vers:unknown/v2.36.1",
                                    "product_id": "CSAFPID-3654192"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.36.2",
                                "product": {
                                    "name": "vers:unknown/v2.36.2",
                                    "product_id": "CSAFPID-3654193"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.37.0",
                                "product": {
                                    "name": "vers:unknown/v2.37.0",
                                    "product_id": "CSAFPID-3654194"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.37.1",
                                "product": {
                                    "name": "vers:unknown/v2.37.1",
                                    "product_id": "CSAFPID-3654195"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.38.0",
                                "product": {
                                    "name": "vers:unknown/v2.38.0",
                                    "product_id": "CSAFPID-3654196"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.38.1",
                                "product": {
                                    "name": "vers:unknown/v2.38.1",
                                    "product_id": "CSAFPID-3654197"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.38.2",
                                "product": {
                                    "name": "vers:unknown/v2.38.2",
                                    "product_id": "CSAFPID-3654198"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.38.3",
                                "product": {
                                    "name": "vers:unknown/v2.38.3",
                                    "product_id": "CSAFPID-3656848"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.39.0",
                                "product": {
                                    "name": "vers:unknown/v2.39.0",
                                    "product_id": "CSAFPID-3656849"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.39.1",
                                "product": {
                                    "name": "vers:unknown/v2.39.1",
                                    "product_id": "CSAFPID-3656850"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.4.0",
                                "product": {
                                    "name": "vers:unknown/v2.4.0",
                                    "product_id": "CSAFPID-3654199"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.4.1",
                                "product": {
                                    "name": "vers:unknown/v2.4.1",
                                    "product_id": "CSAFPID-3654200"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.4.2",
                                "product": {
                                    "name": "vers:unknown/v2.4.2",
                                    "product_id": "CSAFPID-3654201"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.40.0",
                                "product": {
                                    "name": "vers:unknown/v2.40.0",
                                    "product_id": "CSAFPID-3656851"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.41.0",
                                "product": {
                                    "name": "vers:unknown/v2.41.0",
                                    "product_id": "CSAFPID-3656852"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.42.0",
                                "product": {
                                    "name": "vers:unknown/v2.42.0",
                                    "product_id": "CSAFPID-5661675"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.42.1",
                                "product": {
                                    "name": "vers:unknown/v2.42.1",
                                    "product_id": "CSAFPID-5661676"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.42.2",
                                "product": {
                                    "name": "vers:unknown/v2.42.2",
                                    "product_id": "CSAFPID-5661677"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.43.0",
                                "product": {
                                    "name": "vers:unknown/v2.43.0",
                                    "product_id": "CSAFPID-5661678"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.43.1",
                                "product": {
                                    "name": "vers:unknown/v2.43.1",
                                    "product_id": "CSAFPID-5661679"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.44.0",
                                "product": {
                                    "name": "vers:unknown/v2.44.0",
                                    "product_id": "CSAFPID-5661680"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.44.1",
                                "product": {
                                    "name": "vers:unknown/v2.44.1",
                                    "product_id": "CSAFPID-5661681"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.45.0",
                                "product": {
                                    "name": "vers:unknown/v2.45.0",
                                    "product_id": "CSAFPID-5661682"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.45.1",
                                "product": {
                                    "name": "vers:unknown/v2.45.1",
                                    "product_id": "CSAFPID-5661683"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.45.2",
                                "product": {
                                    "name": "vers:unknown/v2.45.2",
                                    "product_id": "CSAFPID-5661684"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.46.0",
                                "product": {
                                    "name": "vers:unknown/v2.46.0",
                                    "product_id": "CSAFPID-5661685"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.46.1",
                                "product": {
                                    "name": "vers:unknown/v2.46.1",
                                    "product_id": "CSAFPID-5661686"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.47.0",
                                "product": {
                                    "name": "vers:unknown/v2.47.0",
                                    "product_id": "CSAFPID-5661687"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.47.1",
                                "product": {
                                    "name": "vers:unknown/v2.47.1",
                                    "product_id": "CSAFPID-5661688"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.48.0",
                                "product": {
                                    "name": "vers:unknown/v2.48.0",
                                    "product_id": "CSAFPID-5661689"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.48.1",
                                "product": {
                                    "name": "vers:unknown/v2.48.1",
                                    "product_id": "CSAFPID-5661690"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.49.0",
                                "product": {
                                    "name": "vers:unknown/v2.49.0",
                                    "product_id": "CSAFPID-5661691"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.49.1",
                                "product": {
                                    "name": "vers:unknown/v2.49.1",
                                    "product_id": "CSAFPID-5661692"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.5.0",
                                "product": {
                                    "name": "vers:unknown/v2.5.0",
                                    "product_id": "CSAFPID-3654202"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.5.1",
                                "product": {
                                    "name": "vers:unknown/v2.5.1",
                                    "product_id": "CSAFPID-3654203"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.5.2",
                                "product": {
                                    "name": "vers:unknown/v2.5.2",
                                    "product_id": "CSAFPID-3654204"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.50.0",
                                "product": {
                                    "name": "vers:unknown/v2.50.0",
                                    "product_id": "CSAFPID-5661693"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.50.1",
                                "product": {
                                    "name": "vers:unknown/v2.50.1",
                                    "product_id": "CSAFPID-5661694"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.51.0",
                                "product": {
                                    "name": "vers:unknown/v2.51.0",
                                    "product_id": "CSAFPID-5661695"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.51.1",
                                "product": {
                                    "name": "vers:unknown/v2.51.1",
                                    "product_id": "CSAFPID-5661696"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.52.0",
                                "product": {
                                    "name": "vers:unknown/v2.52.0",
                                    "product_id": "CSAFPID-5661697"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.52.1",
                                "product": {
                                    "name": "vers:unknown/v2.52.1",
                                    "product_id": "CSAFPID-5661698"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.52.2",
                                "product": {
                                    "name": "vers:unknown/v2.52.2",
                                    "product_id": "CSAFPID-5661699"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.6.0",
                                "product": {
                                    "name": "vers:unknown/v2.6.0",
                                    "product_id": "CSAFPID-3654205"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.6.1",
                                "product": {
                                    "name": "vers:unknown/v2.6.1",
                                    "product_id": "CSAFPID-3654206"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.7.0",
                                "product": {
                                    "name": "vers:unknown/v2.7.0",
                                    "product_id": "CSAFPID-3654207"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.8.0",
                                "product": {
                                    "name": "vers:unknown/v2.8.0",
                                    "product_id": "CSAFPID-3654208"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.9.0",
                                "product": {
                                    "name": "vers:unknown/v2.9.0",
                                    "product_id": "CSAFPID-3654209"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.0.0",
                                "product": {
                                    "name": "vers:unknown/v3.0.0",
                                    "product_id": "CSAFPID-5661700"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.0.1",
                                "product": {
                                    "name": "vers:unknown/v3.0.1",
                                    "product_id": "CSAFPID-5661701"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.0.2",
                                "product": {
                                    "name": "vers:unknown/v3.0.2",
                                    "product_id": "CSAFPID-5661702"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.1.0",
                                "product": {
                                    "name": "vers:unknown/v3.1.0",
                                    "product_id": "CSAFPID-5661703"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.1.1",
                                "product": {
                                    "name": "vers:unknown/v3.1.1",
                                    "product_id": "CSAFPID-5661704"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.2.0",
                                "product": {
                                    "name": "vers:unknown/v3.2.0",
                                    "product_id": "CSAFPID-5661705"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.3.0",
                                "product": {
                                    "name": "vers:unknown/v3.3.0",
                                    "product_id": "CSAFPID-5661706"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.3.1",
                                "product": {
                                    "name": "vers:unknown/v3.3.1",
                                    "product_id": "CSAFPID-5661707"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.0.0",
                                "product": {
                                    "name": "vers:unknown/v4.0.0",
                                    "product_id": "CSAFPID-5661708"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.1.0",
                                "product": {
                                    "name": "vers:unknown/v4.1.0",
                                    "product_id": "CSAFPID-5661709"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.1.1",
                                "product": {
                                    "name": "vers:unknown/v4.1.1",
                                    "product_id": "CSAFPID-5661710"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.2.0",
                                "product": {
                                    "name": "vers:unknown/v4.2.0",
                                    "product_id": "CSAFPID-5661711"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.3.0",
                                "product": {
                                    "name": "vers:unknown/v4.3.0",
                                    "product_id": "CSAFPID-5661712"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.4.0",
                                "product": {
                                    "name": "vers:unknown/v4.4.0",
                                    "product_id": "CSAFPID-5661713"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.4.1",
                                "product": {
                                    "name": "vers:unknown/v4.4.1",
                                    "product_id": "CSAFPID-5661714"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.5.0",
                                "product": {
                                    "name": "vers:unknown/v4.5.0",
                                    "product_id": "CSAFPID-5661715"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.6.0",
                                "product": {
                                    "name": "vers:unknown/v4.6.0",
                                    "product_id": "CSAFPID-5661716"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "wallos"
                    }
                ],
                "category": "vendor",
                "name": "ellite"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/<4.6.1",
                                "product": {
                                    "name": "vers:unknown/<4.6.1",
                                    "product_id": "CSAFPID-5687730",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:wallosapp:wallos:*:*:*:*:*:*:*:*"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "wallos"
                    }
                ],
                "category": "vendor",
                "name": "wallosapp"
            }
        ]
    },
    "vulnerabilities": [
        {
            "cve": "CVE-2026-27479",
            "cwe": {
                "id": "CWE-918",
                "name": "Server-Side Request Forgery (SSRF)"
            },
            "notes": [
                {
                    "category": "description",
                    "text": "Wallos is an open-source, self-hostable personal subscription tracker. Versions 4.6.0 and below contain a Server-Side Request Forgery (SSRF) vulnerability in the subscription and payment logo/icon upload functionality. The application validates the IP address of the provided URL before making the request, but allows HTTP redirects (CURLOPT_FOLLOWLOCATION = true), enabling an attacker to bypass the IP validation and access internal resources, including cloud instance metadata endpoints. The getLogoFromUrl() function validates the URL by resolving the hostname and checking if the resulting IP is in a private or reserved range using FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE. However, the subsequent cURL request is configured with CURLOPT_FOLLOWLOCATION = true and CURLOPT_MAXREDIRS = 3, which means the request will follow HTTP redirects without re-validating the destination IP. This issue has been fixed in version 4.6.1.",
                    "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-27479"
                },
                {
                    "category": "description",
                    "text": "Wallos is an open-source, self-hostable personal subscription tracker. Versions 4.6.0 and below contain a Server-Side Request Forgery (SSRF) vulnerability in the subscription and payment logo/icon upload functionality. The application validates the IP address of the provided URL before making the request, but allows HTTP redirects (CURLOPT_FOLLOWLOCATION = true), enabling an attacker to bypass the IP validation and access internal resources, including cloud instance metadata endpoints. The getLogoFromUrl() function validates the URL by resolving the hostname and checking if the resulting IP is in a private or reserved range using FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE. However, the subsequent cURL request is configured with CURLOPT_FOLLOWLOCATION = true and CURLOPT_MAXREDIRS = 3, which means the request will follow HTTP redirects without re-validating the destination IP. This issue has been fixed in version 4.6.1.",
                    "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-27479"
                },
                {
                    "category": "description",
                    "text": "Wallos is an open-source, self-hostable personal subscription tracker. Versions 4.6.0 and below contain a Server-Side Request Forgery (SSRF) vulnerability in the subscription and payment logo/icon upload functionality. The application validates the IP address of the provided URL before making the request, but allows HTTP redirects (CURLOPT_FOLLOWLOCATION = true), enabling an attacker to bypass the IP validation and access internal resources, including cloud instance metadata endpoints. The getLogoFromUrl() function validates the URL by resolving the hostname and checking if the resulting IP is in a private or reserved range using FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE. However, the subsequent cURL request is configured with CURLOPT_FOLLOWLOCATION = true and CURLOPT_MAXREDIRS = 3, which means the request will follow HTTP redirects without re-validating the destination IP. This issue has been fixed in version 4.6.1.",
                    "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-27479.json?alt=media"
                },
                {
                    "category": "other",
                    "text": "0.00033",
                    "title": "EPSS"
                },
                {
                    "category": "other",
                    "text": "3.9",
                    "title": "NCSC Score"
                },
                {
                    "category": "other",
                    "text": "There is product data available from source Cveprojectv5",
                    "title": "NCSC Score top increasing factors"
                },
                {
                    "category": "other",
                    "text": "There is exploit data available from source Nvd, The value of the most recent EPSS score, Is related to (a version of) an uncommon product",
                    "title": "NCSC Score top decreasing factors"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-5657914",
                    "CSAFPID-3620044",
                    "CSAFPID-3620045",
                    "CSAFPID-3620046",
                    "CSAFPID-3620047",
                    "CSAFPID-3620048",
                    "CSAFPID-3620049",
                    "CSAFPID-3620050",
                    "CSAFPID-3620051",
                    "CSAFPID-3620052",
                    "CSAFPID-3620053",
                    "CSAFPID-3620054",
                    "CSAFPID-3620055",
                    "CSAFPID-3620056",
                    "CSAFPID-3620057",
                    "CSAFPID-3620058",
                    "CSAFPID-3620059",
                    "CSAFPID-3620060",
                    "CSAFPID-3620061",
                    "CSAFPID-3620062",
                    "CSAFPID-3620063",
                    "CSAFPID-3620064",
                    "CSAFPID-3620065",
                    "CSAFPID-3620066",
                    "CSAFPID-3620067",
                    "CSAFPID-3620068",
                    "CSAFPID-3620069",
                    "CSAFPID-3620070",
                    "CSAFPID-3620071",
                    "CSAFPID-3620072",
                    "CSAFPID-3620073",
                    "CSAFPID-3654104",
                    "CSAFPID-3654105",
                    "CSAFPID-3654106",
                    "CSAFPID-3654107",
                    "CSAFPID-3654108",
                    "CSAFPID-3654109",
                    "CSAFPID-3654110",
                    "CSAFPID-3654111",
                    "CSAFPID-3654112",
                    "CSAFPID-3654113",
                    "CSAFPID-3654114",
                    "CSAFPID-3654115",
                    "CSAFPID-3654116",
                    "CSAFPID-3654117",
                    "CSAFPID-3654118",
                    "CSAFPID-3654119",
                    "CSAFPID-3654120",
                    "CSAFPID-3654121",
                    "CSAFPID-3654122",
                    "CSAFPID-3654123",
                    "CSAFPID-3654124",
                    "CSAFPID-3654125",
                    "CSAFPID-3654126",
                    "CSAFPID-3654127",
                    "CSAFPID-3654128",
                    "CSAFPID-3654129",
                    "CSAFPID-3654130",
                    "CSAFPID-3654131",
                    "CSAFPID-3654132",
                    "CSAFPID-3654133",
                    "CSAFPID-3654134",
                    "CSAFPID-3654135",
                    "CSAFPID-3654136",
                    "CSAFPID-3654137",
                    "CSAFPID-3654138",
                    "CSAFPID-3654139",
                    "CSAFPID-3654140",
                    "CSAFPID-3654141",
                    "CSAFPID-3654142",
                    "CSAFPID-3654143",
                    "CSAFPID-3654144",
                    "CSAFPID-3654145",
                    "CSAFPID-3654146",
                    "CSAFPID-3654147",
                    "CSAFPID-3654148",
                    "CSAFPID-3654149",
                    "CSAFPID-3654150",
                    "CSAFPID-3654151",
                    "CSAFPID-3654152",
                    "CSAFPID-3654153",
                    "CSAFPID-3654154",
                    "CSAFPID-3654155",
                    "CSAFPID-3654156",
                    "CSAFPID-3654157",
                    "CSAFPID-3654158",
                    "CSAFPID-3654159",
                    "CSAFPID-3654160",
                    "CSAFPID-3654161",
                    "CSAFPID-3654162",
                    "CSAFPID-3654163",
                    "CSAFPID-3654164",
                    "CSAFPID-3654165",
                    "CSAFPID-3654166",
                    "CSAFPID-3654167",
                    "CSAFPID-3654168",
                    "CSAFPID-3654169",
                    "CSAFPID-3654170",
                    "CSAFPID-3654171",
                    "CSAFPID-3654172",
                    "CSAFPID-3654173",
                    "CSAFPID-3654174",
                    "CSAFPID-3654175",
                    "CSAFPID-3654176",
                    "CSAFPID-3654177",
                    "CSAFPID-3654178",
                    "CSAFPID-3654179",
                    "CSAFPID-3654180",
                    "CSAFPID-3654181",
                    "CSAFPID-3654182",
                    "CSAFPID-3654183",
                    "CSAFPID-3654184",
                    "CSAFPID-3654185",
                    "CSAFPID-3654186",
                    "CSAFPID-3654187",
                    "CSAFPID-3654188",
                    "CSAFPID-3654189",
                    "CSAFPID-3654190",
                    "CSAFPID-3654191",
                    "CSAFPID-3654192",
                    "CSAFPID-3654193",
                    "CSAFPID-3654194",
                    "CSAFPID-3654195",
                    "CSAFPID-3654196",
                    "CSAFPID-3654197",
                    "CSAFPID-3654198",
                    "CSAFPID-3654199",
                    "CSAFPID-3654200",
                    "CSAFPID-3654201",
                    "CSAFPID-3654202",
                    "CSAFPID-3654203",
                    "CSAFPID-3654204",
                    "CSAFPID-3654205",
                    "CSAFPID-3654206",
                    "CSAFPID-3654207",
                    "CSAFPID-3654208",
                    "CSAFPID-3654209",
                    "CSAFPID-3656848",
                    "CSAFPID-3656849",
                    "CSAFPID-3656850",
                    "CSAFPID-3656851",
                    "CSAFPID-3656852",
                    "CSAFPID-5661675",
                    "CSAFPID-5661676",
                    "CSAFPID-5661677",
                    "CSAFPID-5661678",
                    "CSAFPID-5661679",
                    "CSAFPID-5661680",
                    "CSAFPID-5661681",
                    "CSAFPID-5661682",
                    "CSAFPID-5661683",
                    "CSAFPID-5661684",
                    "CSAFPID-5661685",
                    "CSAFPID-5661686",
                    "CSAFPID-5661687",
                    "CSAFPID-5661688",
                    "CSAFPID-5661689",
                    "CSAFPID-5661690",
                    "CSAFPID-5661691",
                    "CSAFPID-5661692",
                    "CSAFPID-5661693",
                    "CSAFPID-5661694",
                    "CSAFPID-5661695",
                    "CSAFPID-5661696",
                    "CSAFPID-5661697",
                    "CSAFPID-5661698",
                    "CSAFPID-5661699",
                    "CSAFPID-5661700",
                    "CSAFPID-5661701",
                    "CSAFPID-5661702",
                    "CSAFPID-5661703",
                    "CSAFPID-5661704",
                    "CSAFPID-5661705",
                    "CSAFPID-5661706",
                    "CSAFPID-5661707",
                    "CSAFPID-5661708",
                    "CSAFPID-5661709",
                    "CSAFPID-5661710",
                    "CSAFPID-5661711",
                    "CSAFPID-5661712",
                    "CSAFPID-5661713",
                    "CSAFPID-5661714",
                    "CSAFPID-5661715",
                    "CSAFPID-5661716",
                    "CSAFPID-5687730"
                ]
            },
            "references": [
                {
                    "category": "external",
                    "summary": "Source - cveprojectv5",
                    "url": "https://www.cve.org/CVERecord?id=CVE-2026-27479"
                },
                {
                    "category": "external",
                    "summary": "Source raw - cveprojectv5",
                    "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/27xxx/CVE-2026-27479.json"
                },
                {
                    "category": "external",
                    "summary": "Source - nvd",
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27479"
                },
                {
                    "category": "external",
                    "summary": "Source raw - nvd",
                    "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-27479"
                },
                {
                    "category": "external",
                    "summary": "Source - first",
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-27479"
                },
                {
                    "category": "external",
                    "summary": "Source raw - first",
                    "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0"
                },
                {
                    "category": "external",
                    "summary": "Source - osv",
                    "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-27479.json?alt=media"
                },
                {
                    "category": "external",
                    "summary": "Source - first",
                    "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; osv",
                    "url": "https://github.com/ellite/Wallos/security/advisories/GHSA-fgmf-7g5v-jmjg"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; osv",
                    "url": "https://github.com/ellite/Wallos/commit/76a53df9cb4658123b8f0b7cf1826f1ba7d1c960"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; osv",
                    "url": "https://github.com/ellite/Wallos/releases/tag/v4.6.1"
                },
                {
                    "category": "external",
                    "summary": "Reference - osv",
                    "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27479.json"
                },
                {
                    "category": "external",
                    "summary": "Reference - osv",
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27479"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
                        "baseScore": 7.7,
                        "baseSeverity": "HIGH"
                    },
                    "products": [
                        "CSAFPID-3620044",
                        "CSAFPID-3620045",
                        "CSAFPID-3620046",
                        "CSAFPID-3620047",
                        "CSAFPID-3620048",
                        "CSAFPID-3620049",
                        "CSAFPID-3620050",
                        "CSAFPID-3620051",
                        "CSAFPID-3620052",
                        "CSAFPID-3620053",
                        "CSAFPID-3620054",
                        "CSAFPID-3620055",
                        "CSAFPID-3620056",
                        "CSAFPID-3620057",
                        "CSAFPID-3620058",
                        "CSAFPID-3620059",
                        "CSAFPID-3620060",
                        "CSAFPID-3620061",
                        "CSAFPID-3620062",
                        "CSAFPID-3620063",
                        "CSAFPID-3620064",
                        "CSAFPID-3620065",
                        "CSAFPID-3620066",
                        "CSAFPID-3620067",
                        "CSAFPID-3620068",
                        "CSAFPID-3620069",
                        "CSAFPID-3620070",
                        "CSAFPID-3620071",
                        "CSAFPID-3620072",
                        "CSAFPID-3620073",
                        "CSAFPID-3654104",
                        "CSAFPID-3654105",
                        "CSAFPID-3654106",
                        "CSAFPID-3654107",
                        "CSAFPID-3654108",
                        "CSAFPID-3654109",
                        "CSAFPID-3654110",
                        "CSAFPID-3654111",
                        "CSAFPID-3654112",
                        "CSAFPID-3654113",
                        "CSAFPID-3654114",
                        "CSAFPID-3654115",
                        "CSAFPID-3654116",
                        "CSAFPID-3654117",
                        "CSAFPID-3654118",
                        "CSAFPID-3654119",
                        "CSAFPID-3654120",
                        "CSAFPID-3654121",
                        "CSAFPID-3654122",
                        "CSAFPID-3654123",
                        "CSAFPID-3654124",
                        "CSAFPID-3654125",
                        "CSAFPID-3654126",
                        "CSAFPID-3654127",
                        "CSAFPID-3654128",
                        "CSAFPID-3654129",
                        "CSAFPID-3654130",
                        "CSAFPID-3654131",
                        "CSAFPID-3654132",
                        "CSAFPID-3654133",
                        "CSAFPID-3654134",
                        "CSAFPID-3654135",
                        "CSAFPID-3654136",
                        "CSAFPID-3654137",
                        "CSAFPID-3654138",
                        "CSAFPID-3654139",
                        "CSAFPID-3654140",
                        "CSAFPID-3654141",
                        "CSAFPID-3654142",
                        "CSAFPID-3654143",
                        "CSAFPID-3654144",
                        "CSAFPID-3654145",
                        "CSAFPID-3654146",
                        "CSAFPID-3654147",
                        "CSAFPID-3654148",
                        "CSAFPID-3654149",
                        "CSAFPID-3654150",
                        "CSAFPID-3654151",
                        "CSAFPID-3654152",
                        "CSAFPID-3654153",
                        "CSAFPID-3654154",
                        "CSAFPID-3654155",
                        "CSAFPID-3654156",
                        "CSAFPID-3654157",
                        "CSAFPID-3654158",
                        "CSAFPID-3654159",
                        "CSAFPID-3654160",
                        "CSAFPID-3654161",
                        "CSAFPID-3654162",
                        "CSAFPID-3654163",
                        "CSAFPID-3654164",
                        "CSAFPID-3654165",
                        "CSAFPID-3654166",
                        "CSAFPID-3654167",
                        "CSAFPID-3654168",
                        "CSAFPID-3654169",
                        "CSAFPID-3654170",
                        "CSAFPID-3654171",
                        "CSAFPID-3654172",
                        "CSAFPID-3654173",
                        "CSAFPID-3654174",
                        "CSAFPID-3654175",
                        "CSAFPID-3654176",
                        "CSAFPID-3654177",
                        "CSAFPID-3654178",
                        "CSAFPID-3654179",
                        "CSAFPID-3654180",
                        "CSAFPID-3654181",
                        "CSAFPID-3654182",
                        "CSAFPID-3654183",
                        "CSAFPID-3654184",
                        "CSAFPID-3654185",
                        "CSAFPID-3654186",
                        "CSAFPID-3654187",
                        "CSAFPID-3654188",
                        "CSAFPID-3654189",
                        "CSAFPID-3654190",
                        "CSAFPID-3654191",
                        "CSAFPID-3654192",
                        "CSAFPID-3654193",
                        "CSAFPID-3654194",
                        "CSAFPID-3654195",
                        "CSAFPID-3654196",
                        "CSAFPID-3654197",
                        "CSAFPID-3654198",
                        "CSAFPID-3654199",
                        "CSAFPID-3654200",
                        "CSAFPID-3654201",
                        "CSAFPID-3654202",
                        "CSAFPID-3654203",
                        "CSAFPID-3654204",
                        "CSAFPID-3654205",
                        "CSAFPID-3654206",
                        "CSAFPID-3654207",
                        "CSAFPID-3654208",
                        "CSAFPID-3654209",
                        "CSAFPID-3656848",
                        "CSAFPID-3656849",
                        "CSAFPID-3656850",
                        "CSAFPID-3656851",
                        "CSAFPID-3656852",
                        "CSAFPID-5657914",
                        "CSAFPID-5661675",
                        "CSAFPID-5661676",
                        "CSAFPID-5661677",
                        "CSAFPID-5661678",
                        "CSAFPID-5661679",
                        "CSAFPID-5661680",
                        "CSAFPID-5661681",
                        "CSAFPID-5661682",
                        "CSAFPID-5661683",
                        "CSAFPID-5661684",
                        "CSAFPID-5661685",
                        "CSAFPID-5661686",
                        "CSAFPID-5661687",
                        "CSAFPID-5661688",
                        "CSAFPID-5661689",
                        "CSAFPID-5661690",
                        "CSAFPID-5661691",
                        "CSAFPID-5661692",
                        "CSAFPID-5661693",
                        "CSAFPID-5661694",
                        "CSAFPID-5661695",
                        "CSAFPID-5661696",
                        "CSAFPID-5661697",
                        "CSAFPID-5661698",
                        "CSAFPID-5661699",
                        "CSAFPID-5661700",
                        "CSAFPID-5661701",
                        "CSAFPID-5661702",
                        "CSAFPID-5661703",
                        "CSAFPID-5661704",
                        "CSAFPID-5661705",
                        "CSAFPID-5661706",
                        "CSAFPID-5661707",
                        "CSAFPID-5661708",
                        "CSAFPID-5661709",
                        "CSAFPID-5661710",
                        "CSAFPID-5661711",
                        "CSAFPID-5661712",
                        "CSAFPID-5661713",
                        "CSAFPID-5661714",
                        "CSAFPID-5661715",
                        "CSAFPID-5661716",
                        "CSAFPID-5687730"
                    ]
                }
            ],
            "title": "CVE-2026-27479"
        }
    ]
}