CVE-2026-21429CWE-862

Emlog has Broken Access Control (BAC)

Low · published January 2, 2026

CVSS v4.0
2.0
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete their articles after publishing them. As of time of publication, no known patched versions are available.

The record
Technical detail
CVSS v4.0
2.0 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00238 · 14.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-01-02T17:23Z
EPSS history
Timeline
  • 02 JAN 17:23Z
    Emlog has Broken Access Control (BAC)
    cvelistv5