CVE Tools
Track your stack

Emlog

37 CVEs tracked since 2021. Since Apr 2021, none of them reached CISA KEV.

Emlog CVEs per month

Apr 2021 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Emlog CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2021-0420
2021-0530
2021-062 or fewer
2021-072 or fewer
2021-083 or fewer
2021-092 or fewer
2021-1030
2021-112 or fewer
2021-122 or fewer
2022-012 or fewer
2022-022 or fewer
2022-033 or fewer
2022-043 or fewer
2022-053 or fewer
2022-063 or fewer
2022-073 or fewer
2022-083 or fewer
2022-093 or fewer
2022-102 or fewer
2022-113 or fewer
2022-123 or fewer
2023-013 or fewer
2023-023 or fewer
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-064 or fewer
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-1260
2025-014 or fewer
2025-0250
2025-035 or fewer
2025-044 or fewer
2025-0550
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-1070
2025-114 or fewer
2025-125 or fewer
2026-0160
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Emlog's monthly top three, with their CVEs summed over those months.

  1. Emlog378 months
  2. Pro11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Emlog.

  1. CVE-2026-73848Emlog: Stored XSS via Tag Name in Article Editor—
  2. CVE-2026-53757Emlog: Zip Slip Path Traversal in Plugin/Template ZIP Upload Enables RCE—
  3. CVE-2026-53758Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitized—
  4. CVE-2026-53756Emlog Blind SQL Injection via Authentication Cookie4.9
  5. CVE-2026-73850Emlog: Arbitrary SQL Execution Vulnerability in ai.php within queryDatabase() Function—
  6. CVE-2026-73849emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.9.8
  7. CVE-2026-73847Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover6.8
  8. CVE-2026-67598Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php7.4
  9. CVE-2026-46687Emlog Local File Inclusion (LFI)—
  10. CVE-2026-46686Emlog Reflected Cross-Site Scripting—
  11. CVE-2026-39276The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code. By uploading a malicious ZIP archive contain...7.2
  12. CVE-2026-42287Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() Functions—
  13. CVE-2026-42286Emlog: Cross-Site Request Forgery in Admin Functions—
  14. CVE-2026-41517Emlog: Remote Code Execution via Malicious Plugin Upload—
  15. CVE-2026-34788Emlog: SQL Injection in tag_model::updateTagName() via unsanitized parameters6.5

The record

Peak rank
#102 in Dec 2024
Busiest month shown
Oct 2025, 7 CVEs
Months with a KEV entry
0 since Apr 2021
Monthly snapshots
8 since 2021
Emlog's full record, month by month