VULNERABILITY INTELLIGENCE

CVE-2026-82089

EPSS probability0.53%

CISA KEVNot currently listed

Published2026-08-28

Last modified2026-09-09

Description

The wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView.