Emlog
37 CVEs tracked since 2021. Since Apr 2021, none of them reached CISA KEV.
Emlog CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2021-04 | 2 | 0 |
| 2021-05 | 3 | 0 |
| 2021-06 | null or fewer | |
| 2021-07 | null or fewer | |
| 2021-08 | null or fewer | |
| 2021-09 | null or fewer | |
| 2021-10 | 3 | 0 |
| 2021-11 | null or fewer | |
| 2021-12 | null or fewer | |
| 2022-01 | null or fewer | |
| 2022-02 | null or fewer | |
| 2022-03 | null or fewer | |
| 2022-04 | null or fewer | |
| 2022-05 | null or fewer | |
| 2022-06 | null or fewer | |
| 2022-07 | null or fewer | |
| 2022-08 | null or fewer | |
| 2022-09 | null or fewer | |
| 2022-10 | null or fewer | |
| 2022-11 | null or fewer | |
| 2022-12 | null or fewer | |
| 2023-01 | null or fewer | |
| 2023-02 | null or fewer | |
| 2023-03 | null or fewer | |
| 2023-04 | null or fewer | |
| 2023-05 | null or fewer | |
| 2023-06 | null or fewer | |
| 2023-07 | null or fewer | |
| 2023-08 | null or fewer | |
| 2023-09 | null or fewer | |
| 2023-10 | null or fewer | |
| 2023-11 | null or fewer | |
| 2023-12 | null or fewer | |
| 2024-01 | null or fewer | |
| 2024-02 | null or fewer | |
| 2024-03 | null or fewer | |
| 2024-04 | null or fewer | |
| 2024-05 | null or fewer | |
| 2024-06 | null or fewer | |
| 2024-07 | null or fewer | |
| 2024-08 | null or fewer | |
| 2024-09 | null or fewer | |
| 2024-10 | null or fewer | |
| 2024-11 | null or fewer | |
| 2024-12 | 6 | 0 |
| 2025-01 | null or fewer | |
| 2025-02 | 5 | 0 |
| 2025-03 | null or fewer | |
| 2025-04 | null or fewer | |
| 2025-05 | 5 | 0 |
| 2025-06 | null or fewer | |
| 2025-07 | null or fewer | |
| 2025-08 | null or fewer | |
| 2025-09 | null or fewer | |
| 2025-10 | 7 | 0 |
| 2025-11 | null or fewer | |
| 2025-12 | null or fewer | |
| 2026-01 | 6 | 0 |
Products
The products that kept showing up in Emlog's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Emlog.
- CVE-2026-73848Emlog: Stored XSS via Tag Name in Article Editor—
- CVE-2026-53757Emlog: Zip Slip Path Traversal in Plugin/Template ZIP Upload Enables RCE—
- CVE-2026-53758Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitized—
- CVE-2026-53756Emlog Blind SQL Injection via Authentication Cookie4.9
- CVE-2026-73850Emlog: Arbitrary SQL Execution Vulnerability in ai.php within queryDatabase() Function—
- CVE-2026-73849emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.9.8
- CVE-2026-73847Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover6.8
- CVE-2026-67598Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php7.4
- CVE-2026-46687Emlog Local File Inclusion (LFI)—
- CVE-2026-46686Emlog Reflected Cross-Site Scripting—
- CVE-2026-39276The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code. By uploading a malicious ZIP archive contain...7.2
- CVE-2026-42287Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() Functions—
- CVE-2026-42286Emlog: Cross-Site Request Forgery in Admin Functions—
- CVE-2026-41517Emlog: Remote Code Execution via Malicious Plugin Upload—
- CVE-2026-34788Emlog: SQL Injection in tag_model::updateTagName() via unsanitized parameters6.5
The record
- Peak rank
- #102 in Dec 2024
- Busiest month shown
- Oct 2025, 7 CVEs
- Months with a KEV entry
- 0 since Apr 2021
- Monthly snapshots
- 8 since 2021