CVE-2026-82089 Blast Radius

HIGH • CVSS 8.8The wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView.

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-82089.

Start Free Scan →← Back to CVE-2026-82089