CVE-2026-42287criticalCWE-89

CVE-2026-42287: fallo crítico en emlog

Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() Functions

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear emlog

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 10epss 0.2%
Emlog is an open source website building system. Prior to version 2.6.11, direct SQL injection in article creation and update functions allows attackers to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or system destruction. This issue has been patched in version 2.6.11.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Productos afectados
emlog · emlog
CVEs relacionadas — emlog

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-34607HIGHEmlog: Path Traversal in emUnZip() allows arbitrary file write leading to RCEEPSS 0.9%CVE-2025-47785HIGHEMLOG SQL Injection VulnerabilityEPSS 0.8%CVE-2025-47787HIGHEmlog Pro Contains a File Upload VulnerabilityEPSS 0.8%CVE-2026-22799CRITICALemlog Arbitrary File Upload VulnerabilityEPSS 0.7%CVE-2026-73849CRITICALemlog allows unauthenticated reinstallation via `install.php?action=reinstall`.EPSS 0.7%CVE-2025-30372HIGHEmlog Pro contains an SQL injection vulnerability.EPSS 0.6%