E
Vendor security profile
emlog
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs17
Critical3
CISA KEV0
Public exploit12
Patch rate%12
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
0
0
5
1
0
0
4
1
0
CVE KEV
CVE severity distribution
17toplam CVE
Critical3 (18%)
High7 (41%)
Medium7 (41%)
Patch and exploitation view
%12
Verified patch
%0
CISA KEV
%71
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
15Unknown
Latest vulnerabilities
8.7
CVE-2026-53758
Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitized
E
Patch status unknownEPSS %0
8.6
CVE-2026-73850
Emlog: Arbitrary SQL Execution Vulnerability in ai.php within queryDatabase() Function
E
Patch status unknownEPSS %0
9.8
CVE-2026-73849
emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.
E
Patch status unknownEPSS %1
6.8
CVE-2026-73847
Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover
E
Patch status unknownEPSS %0
9.1
CVE-2026-67598
Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php
E
Patch status unknownEPSS %0
7.2
CVE-2026-39276
Path traversal in Emlog
E
Patch status unknownEPSS %1
6.5
CVE-2026-34788
SQL injection in Emlog
E
Patch status unknownEPSS %0
6.5
CVE-2026-34787
Vulnerability in Emlog
E
Patch status unknownEPSS %1
7.2
CVE-2026-34607
Path traversal in Emlog
E
Patch status unknownEPSS %1
6.1
CVE-2026-34229
Cross-site scripting in Emlog
E
Patch verifiedEPSS %0