Known vulnerabilities in Emlog Pro 2.6.12

Vendor: Emlog
Software: Emlog Pro
Version: 2.6.12
Software CPE: cpe:2.3:a:emlog:emlog_pro:*:*:*:*:*:*:*:*
Total vulnerabilities: 14
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Emlog Pro version 2.6.12 Emlog Pro 2.6.12 is affected by 14 vulnerabilities: 1 high, 5 medium, 8 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142828 - External Control of File Name or Path
CWE-73 Medium
No
No
2.6.25 15.08.2026 SB20260815111
#VU142827 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
2.6.25 15.08.2026 SB20260815111
#VU142826 - Authorization Bypass Through User-Controlled Key
CWE-639 Low
No
No
2.6.25 15.08.2026 SB20260815111
#VU142825 - Cross-Site Request Forgery (CSRF)
CWE-352 High
No
No
2.6.25 15.08.2026 SB20260815111
#VU142824 - Cross-Site Request Forgery (CSRF)
CWE-352 Medium
No
No
2.6.25 15.08.2026 SB20260815111
#VU142823 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.6.25 15.08.2026 SB20260815111
#VU142821 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-52520
CWE-79 Low
No
No
2.6.24 15.08.2026 SB20260815108
#VU142817 - Cross-Site Request Forgery (CSRF)
CVE-2026-73847
CWE-352 Medium
No
No
2.6.24 15.08.2026 SB20260815108
#VU142816 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-53758
CWE-79 Low
No
No
2.6.17 15.08.2026 SB20260815117
#VU142815 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-53757
CWE-22 Low
No
No
2.6.17 15.08.2026 SB20260815117
#VU142814 - Unrestricted Upload of File with Dangerous Type
CWE-434 Low
No
No
2.6.13 15.08.2026 SB20260815107
#VU142812 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-53756
CWE-89 Low
No
No
2.6.15 15.08.2026 SB20260815106
#VU142811 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-46687
CWE-22 Medium
No
No
2.6.14 15.08.2026 SB20260815105
#VU142810 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-46686
CWE-79 Medium
No
No
2.6.14 15.08.2026 SB20260815105