Known vulnerabilities in Emlog Pro

Vendor: Emlog
Software: Emlog Pro
Software CPE: cpe:2.3:a:emlog:emlog_pro:*:*:*:*:*:*:*:*
Total vulnerabilities: 48
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Emlog Pro Emlog Pro is affected by 48 known vulnerabilities: 2 high, 17 medium, 29 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142828 - External Control of File Name or Path
CWE-73 Medium
No
No
2.6.25 15.08.2026 SB20260815111
#VU142827 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
2.6.25 15.08.2026 SB20260815111
#VU142826 - Authorization Bypass Through User-Controlled Key
CWE-639 Low
No
No
2.6.25 15.08.2026 SB20260815111
#VU142825 - Cross-Site Request Forgery (CSRF)
CWE-352 High
No
No
2.6.25 15.08.2026 SB20260815111
#VU142824 - Cross-Site Request Forgery (CSRF)
CWE-352 Medium
No
No
2.6.25 15.08.2026 SB20260815111
#VU142823 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.6.25 15.08.2026 SB20260815111
#VU142821 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-52520
CWE-79 Low
No
No
2.6.24 15.08.2026 SB20260815108
#VU142820 - Improper Access Control
CVE-2026-73850
CWE-284 Low
No
No
2.6.21 15.08.2026 SB20260815110
#VU142819 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-73848
CWE-79 Low
No
No
2.5.1 15.08.2026 SB20260815109
#VU142818 - Improper Certificate Validation
CVE-2026-67598
CWE-295 Medium
No
No
2.6.24 15.08.2026 SB20260815108
#VU142817 - Cross-Site Request Forgery (CSRF)
CVE-2026-73847
CWE-352 Medium
No
No
2.6.24 15.08.2026 SB20260815108
#VU142816 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-53758
CWE-79 Low
No
No
2.6.17 15.08.2026 SB20260815117
#VU142815 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-53757
CWE-22 Low
No
No
2.6.17 15.08.2026 SB20260815117
#VU142814 - Unrestricted Upload of File with Dangerous Type
CWE-434 Low
No
No
2.6.13 15.08.2026 SB20260815107
#VU142812 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-53756
CWE-89 Low
No
No
2.6.15 15.08.2026 SB20260815106
#VU142811 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-46687
CWE-22 Medium
No
No
2.6.14 15.08.2026 SB20260815105
#VU142810 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-46686
CWE-79 Medium
No
No
2.6.14 15.08.2026 SB20260815105
#VU142809 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-42287
CWE-89 High
No
No
2.6.11 15.08.2026 SB20260815104
#VU142808 - Cross-Site Request Forgery (CSRF)
CVE-2026-42286
CWE-352 Low
No
No
2.6.11 15.08.2026 SB20260815104
#VU142807 - Improper Access Control
CVE-2026-41517
CWE-284 Medium
No
No
2.6.11 15.08.2026 SB20260815104


Showing elements 1 - 20 out of 48