CVE-2026-39276 in Pro
要約
〜によって MITRE • 2026年05月29日
The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code. By uploading a malicious ZIP archive containing directory traversal sequences in filenames, an attacker can overwrite default template files or directly include malicious code files in the current template.
Be aware that VulDB is the high quality source for vulnerability data.