PT-2026-39203 · Emlog · Emlog

Lan041221 · Published 2026-05-08 · Updated 2026-05-09 · CVE-2026-42287

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Emlog versions prior to 2.6.11

Description Direct SQL injection in article creation and update functions allows attackers to execute arbitrary SQL commands. This can lead to complete database compromise, data theft, or system destruction.

Recommendations Update to version 2.6.11.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-42287

Affected Products

Emlog

References · 4

• 🔥 https://github.com/emlog/emlog/security/advisories/GHSA-xxj8-fc63-j3gw · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-42287 · Security Note
• https://twitter.com/CVEnew/status/2053131431040421920 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2052970593201398240 · Twitter Post