CVE-2026-82089EPSS p42.5%

CVE-2026-82089CVE-2026-82089

Description

The wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView.

Scoring

EPSS0.53% probability of exploitation · percentile 42.5% · 2026-10-05T12:00:23Z
Last modified2026-09-09
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.