CVE-2026-41517

Vulnerability Description

Emlog is an open source website building system. Prior to version 2.6.11, insecure plugin upload functionality allows attackers to upload and execute arbitrary PHP code, leading to complete server compromise and persistent backdoor installation. This issue has been patched in version 2.6.11.

Related Weaknesses (CWE)

CWE-434

References

https://github.com/emlog/emlog/security/advisories/GHSA-8qwx-6jx6-94x4

FAQ

What is CVE-2026-41517?

CVE-2026-41517 is a documented vulnerability. Emlog is an open source website building system. Prior to version 2.6.11, insecure plugin upload functionality allows attackers to upload and execute arbitrary PHP code, leading to complete server com...

How severe is CVE-2026-41517?

CVSS scoring is not yet available for CVE-2026-41517. Check NVD for updates.

Is there a patch for CVE-2026-41517?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.