Skip to content
OpenAdvisories
Low · 2.0 CVE-2026-21429 EUVD-2026-0752

Emlog has Broken Access Control (BAC)

Published Jan 2, 2026 · Updated Jan 2, 2026 · Assigned by GitHub_M

Description

Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete their articles after publishing them. As of time of publication, no known patched versions are available.

Affected products

VendorProductAffectedFixed
emlog emlog = 2.5.23 —

References