{"schema_version":1,"title":"Ellite vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in Ellite: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-77353, was published on 31 August 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/ellite","json_url":"https://junglewise.ai/threats/vendors/ellite.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/ellite","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":3,"all_time":7,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":6,"last_90_days":6,"last_365_days":7},"latest":[{"cve":"CVE-2026-77353","cvss":4.6,"epss":0.0029,"slug":"cve-2026-77353-wallos-crlf-injection-in-icalendar-export","title":"Wallos CRLF injection in iCalendar export","severity":"medium","exploited":false,"published_at":"2026-08-31T22:17:20.743+00:00","url":"https://junglewise.ai/threats/cve-2026-77353-wallos-crlf-injection-in-icalendar-export"},{"cve":"CVE-2026-61641","cvss":8.1,"epss":0.0053,"slug":"cve-2026-61641-wallos-oidc-account-takeover-via-unverified-email-linking","title":"Wallos OIDC account takeover via unverified email linking","severity":"high","exploited":false,"published_at":"2026-08-31T21:17:17.373+00:00","url":"https://junglewise.ai/threats/cve-2026-61641-wallos-oidc-account-takeover-via-unverified-email-linking"},{"cve":"CVE-2026-54599","epss":0.0022,"slug":"cve-2026-54599-wallos-oidc-state-validation-missing-in-login-csrf","title":"Wallos OIDC state validation missing in login CSRF","severity":"info","exploited":false,"published_at":"2026-08-31T21:17:10.063+00:00","url":"https://junglewise.ai/threats/cve-2026-54599-wallos-oidc-state-validation-missing-in-login-csrf"},{"cve":"CVE-2026-54598","cvss":7.5,"epss":0.0046,"slug":"cve-2026-54598-wallos-unauthenticated-database-migration-execution","title":"Wallos unauthenticated database migration execution","severity":"high","exploited":false,"published_at":"2026-08-31T21:17:09.843+00:00","url":"https://junglewise.ai/threats/cve-2026-54598-wallos-unauthenticated-database-migration-execution"},{"cve":"CVE-2026-50199","cvss":4.3,"epss":0.0026,"slug":"cve-2026-50199-wallos-incorrect-authorization-in-exchange-rate-refresh","title":"Wallos incorrect authorization in exchange-rate refresh","severity":"medium","exploited":false,"published_at":"2026-08-31T21:17:08.847+00:00","url":"https://junglewise.ai/threats/cve-2026-50199-wallos-incorrect-authorization-in-exchange-rate-refresh"},{"cve":"CVE-2026-50198","cvss":4.3,"epss":0.0029,"slug":"cve-2026-50198-wallos-cross-user-subscription-cost-inference-via-replacement","title":"Wallos cross-user subscription cost inference via replacement_subscription_id","severity":"medium","exploited":false,"published_at":"2026-08-31T21:17:08.7+00:00","url":"https://junglewise.ai/threats/cve-2026-50198-wallos-cross-user-subscription-cost-inference-via-replacement"},{"cve":"CVE-2025-60535","cvss":7.3,"epss":0.0017,"slug":"cve-2025-60535-wallos-csrf-in-currency-and-category-endpoints","title":"Wallos CSRF in currency and category endpoints","severity":"high","exploited":false,"published_at":"2025-10-14T17:16:14.203+00:00","url":"https://junglewise.ai/threats/cve-2025-60535-wallos-csrf-in-currency-and-category-endpoints"}],"vendor":{"hub":true,"name":"Ellite","slug":"ellite","homepage":"https://www.d3dsecurity.com/","description":"D3D Security is a provider of wireless home security systems, IP cameras, and smart home automation products.","url":"https://junglewise.ai/threats/vendors/ellite"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-61641","cvss":8.1,"epss":0.0053,"slug":"cve-2026-61641-wallos-oidc-account-takeover-via-unverified-email-linking","title":"Wallos OIDC account takeover via unverified email linking","severity":"high","exploited":false,"published_at":"2026-08-31T21:17:17.373+00:00","url":"https://junglewise.ai/threats/cve-2026-61641-wallos-oidc-account-takeover-via-unverified-email-linking"},{"cve":"CVE-2026-54598","cvss":7.5,"epss":0.0046,"slug":"cve-2026-54598-wallos-unauthenticated-database-migration-execution","title":"Wallos unauthenticated database migration execution","severity":"high","exploited":false,"published_at":"2026-08-31T21:17:09.843+00:00","url":"https://junglewise.ai/threats/cve-2026-54598-wallos-unauthenticated-database-migration-execution"},{"cve":"CVE-2025-60535","cvss":7.3,"epss":0.0017,"slug":"cve-2025-60535-wallos-csrf-in-currency-and-category-endpoints","title":"Wallos CSRF in currency and category endpoints","severity":"high","exploited":false,"published_at":"2025-10-14T17:16:14.203+00:00","url":"https://junglewise.ai/threats/cve-2025-60535-wallos-csrf-in-currency-and-category-endpoints"},{"cve":"CVE-2026-77353","cvss":4.6,"epss":0.0029,"slug":"cve-2026-77353-wallos-crlf-injection-in-icalendar-export","title":"Wallos CRLF injection in iCalendar export","severity":"medium","exploited":false,"published_at":"2026-08-31T22:17:20.743+00:00","url":"https://junglewise.ai/threats/cve-2026-77353-wallos-crlf-injection-in-icalendar-export"},{"cve":"CVE-2026-50198","cvss":4.3,"epss":0.0029,"slug":"cve-2026-50198-wallos-cross-user-subscription-cost-inference-via-replacement","title":"Wallos cross-user subscription cost inference via replacement_subscription_id","severity":"medium","exploited":false,"published_at":"2026-08-31T21:17:08.7+00:00","url":"https://junglewise.ai/threats/cve-2026-50198-wallos-cross-user-subscription-cost-inference-via-replacement"},{"cve":"CVE-2026-50199","cvss":4.3,"epss":0.0026,"slug":"cve-2026-50199-wallos-incorrect-authorization-in-exchange-rate-refresh","title":"Wallos incorrect authorization in exchange-rate refresh","severity":"medium","exploited":false,"published_at":"2026-08-31T21:17:08.847+00:00","url":"https://junglewise.ai/threats/cve-2026-50199-wallos-incorrect-authorization-in-exchange-rate-refresh"},{"cve":"CVE-2026-54599","epss":0.0022,"slug":"cve-2026-54599-wallos-oidc-state-validation-missing-in-login-csrf","title":"Wallos OIDC state validation missing in login CSRF","severity":"info","exploited":false,"published_at":"2026-08-31T21:17:10.063+00:00","url":"https://junglewise.ai/threats/cve-2026-54599-wallos-oidc-state-validation-missing-in-login-csrf"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Ellite Wallos","slug":"wallos","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/wallos"}]}