Skip to content
OpenAdvisories

Vendor

emlog

40 known vulnerabilities.

Products

emlog 39 Pro 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-73847 Public exploit

    Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover

    Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant execute_tool action in admin/ai.php lets a remote unauthenticated attacker submit a forged cross-site request from an attacker-controlled page …

    emlog emlog