CVE-2026-77353 Wallos iCalendar Injection Vulnerability. Affected product: Wallos personal subscription tracker. Vulnerability class: iCalendar injection. Likely operational impact: Authenticated users can inject arbitrary iCalendar properties and events into .ics feeds. Source-confidence limits: High confidence based on CVE Program and NIST NVD records. Review context: Users of Wallos versions prior to 5 [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-31T22:17:20.317Z and has not been modified since then. CVE-2026-77348 is a HIGH severity vulnerability in Wallos, an open-source personal subscription tracker. The issue arises from the logo-image search endpoint (endpoints/payments/search.php) not being properly hardened against SSRF attacks, unlik [truncated]
