Vulnerabilities in ellite

27 results
Vexday analysis

A Ellite apresenta 14 vulnerabilidades catalogadas, com 3 publicadas nos últimos 90 dias, indicando atividade recente de descobertas. Nenhuma vulnerabilidade está sob ataque ativo (KEV) e não há críticas registradas, o que reduz a urgência imediata. A fraqueza dominante (CWE-918 - Server-Side Request Forgery) representa um vetor de risco estrutural que merece remediação planejada.

CVE-2026-77352MEDIUMWallos: Authenticated SSRF via per-user SMTP notification host (low-privilege user)EPSS 0.2%CVE-2026-33400MEDIUMWallos: Stored cross-site scripting (XSS) vulnerability in the payment method rename endpointEPSS 0.2%CVE-2026-50199MEDIUMWallos: Cross-user Fixer/API Layer credential consumption in exchange-rate refreshEPSS 0.2%CVE-2026-77351LOWWallos: SSRF via Unvalidated User-Level SMTP Host in Email Notification SettingsEPSS 0.2%CVE-2026-41689MEDIUMWallos: Shared local webhook allowlist lets low-privilege users send arbitrary requests to allowlisted internal servicesEPSS 0.2%CVE-2026-54599HIGHWallos: OIDC state parameter never validated — login CSRF / account takeoverEPSS 0.2%CVE-2026-77353MEDIUMWallos: iCalendar Injection via CRLF in Subscription Name/Notes ExportEPSS 0.2%