PT-2026-1113 · Emlog · Emlog

Emlog · Published 2026-01-02 · Updated 2026-01-02 · CVE-2026-21429

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Emlog version 2.5.23

Description Emlog is a website building system. In version 2.5.23, administrators can configure controls that prevent users from editing or deleting their articles after they are published. No patched versions are currently available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-21429

GHSA-JW5V-2G53-RX8W

Affected Products

Emlog

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/21xxx/CVE-2026-21429.json · Exploit
• https://github.com/emlog/emlog/security/advisories/GHSA-jw5v-2g53-rx8w · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-21429 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21429 · Security Note
• https://twitter.com/CVEnew/status/2007168116502274064 · Twitter Post
• https://t.me/CVEtracker/41283 · Telegram Post