CVE-2026-27479 | ellite Wallos up to 4.6.0 getLogoFromUrl server-side request forgery (GHSA-fgmf-7g5v-jmjg)

A vulnerability identified as critical has been detected in ellite Wallos up to 4.6.0. This issue affects the function getLogoFromUrl. Performing a manipulation results in server-side request forgery.

This vulnerability is reported as CVE-2026-27479. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.