Skip to content
OpenAdvisories

Vendor

emlog

40 known vulnerabilities.

Products

emlog 39 Pro 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-73847 Public exploit

    Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover

    Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant execute_tool action in admin/ai.php lets a remote unauthenticated attacker submit a forged cross-site request from an attacker-controlled page …

    emlog emlog
  • High 7.4
    CVE-2026-67598 Public exploit

    Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php

    Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows network-adjacent attackers to intercept outbound HTTPS requests to configured LLM providers by presenting arbitrary TLS certificates, a…

    emlog emlog