Vulnerability DatabaseCVE-2026-41517
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2026-41517
Published:May 08, 2026
Updated:August 06, 2026
Emlog is an open source website building system. Prior to version 2.6.11, insecure plugin upload functionality allows attackers to upload and execute arbitrary PHP code, leading to complete server compromise and persistent backdoor installation. This issue has been patched in version 2.6.11.
Affected Packages
https://github.com/emlog/emlog.git (GITHUB):
Affected version(s) >=pro-2.6.1 <pro-2.6.11
Fix Suggestion:
Update to version pro-2.6.11
Related Resources (3)
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41517.json
https://github.com/emlog/emlog/security/advisories/GHSA-8qwx-6jx6-94x4
https://nvd.nist.gov/vuln/detail/CVE-2026-41517
Do you need more information?
Contact Us
Weakness Type (CWE)
Unrestricted Upload of File with Dangerous Type
CWE-434
EPSS
Base Score:
0.28