Beveiligingsadvies

CVE-2026-39276

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-29 00:00:00

Laatst bijgewerkt 2026-05-29 19:31:52

Toegewezen door mitre

CVSS-score 7.2

Status PUBLISHED

Beschrijving

The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code. By uploading a malicious ZIP archive containing directory traversal sequences in filenames, an attacker can overwrite default template files or directly include malicious code files in the current template.

← Alle CVE's bekijken Bekijk op cve.org ↗