Emlog · Emlog · CVE-2026-42286
**Name of the Vulnerable Software and Affected Versions**
Emlog versions prior to 2.6.11
**Description**
Missing Cross-Site Request Forgery (CSRF) protection in critical admin functions allows attackers to trick authenticated administrators into performing unauthorized actions. These actions include system registration, plugin management, and configuration changes. CSRF is a flaw where a malicious site tricks a user's browser into sending an unauthorized request to a web application where the user is authenticated.
**Recommendations**
Update to version 2.6.11.