Known vulnerabilities in Emlog Pro 2.6.24

Vendor: Emlog
Software: Emlog Pro
Version: 2.6.24
Software CPE: cpe:2.3:a:emlog:emlog_pro:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Emlog Pro version 2.6.24 Emlog Pro 2.6.24 is affected by 6 vulnerabilities: 1 high, 2 medium, 3 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142828 - External Control of File Name or Path
CWE-73 Medium
No
No
2.6.25 15.08.2026 SB20260815111
#VU142827 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
2.6.25 15.08.2026 SB20260815111
#VU142826 - Authorization Bypass Through User-Controlled Key
CWE-639 Low
No
No
2.6.25 15.08.2026 SB20260815111
#VU142825 - Cross-Site Request Forgery (CSRF)
CWE-352 High
No
No
2.6.25 15.08.2026 SB20260815111
#VU142824 - Cross-Site Request Forgery (CSRF)
CWE-352 Medium
No
No
2.6.25 15.08.2026 SB20260815111
#VU142823 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.6.25 15.08.2026 SB20260815111