PT-2026-1113 · Emlog · Emlog

Emlog · Publicado 2026-01-02 · Atualizado 2026-01-02 · CVE-2026-21429

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Média

Vetor base

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Emlog version 2.5.23

Description Emlog is a website building system. In version 2.5.23, administrators can configure controls that prevent users from editing or deleting their articles after they are published. No patched versions are currently available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-21429

GHSA-JW5V-2G53-RX8W

Produtos afetados

Emlog

Referências · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/21xxx/CVE-2026-21429.json · Exploit
• https://github.com/emlog/emlog/security/advisories/GHSA-jw5v-2g53-rx8w · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2007168116502274064 · Publicação no Twitter
• https://t.me/CVEtracker/41283 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-21429 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-21429 · Nota de Segurança