PT-2026-1119 · Emlog · Emlog

Mahmoudgmy · Publicado 2026-01-02 · Atualizado 2026-01-02 · CVE-2026-21432

Positive Technologies (AI Summary)

CVSS v4.0

8.2

Alta

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions Emlog version 2.5.23

Description Emlog, an open source website building system, contains a stored cross-site scripting issue. This can allow for account takeover, including administrative accounts. As of the time of publication, no patched versions are available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-21432

GHSA-4RXF-MJQX-C464

Produtos afetados

Emlog

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/21xxx/CVE-2026-21432.json · Exploit
• https://github.com/emlog/emlog/security/advisories/GHSA-4rxf-mjqx-c464 · Aviso do Fabricante
• https://t.me/cveNotify/147590 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2007168110420472189 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2007178115739504794 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-21432 · Aviso do Fabricante
• https://t.me/CVEtracker/41288 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-21432 · Nota de Segurança