CVE-2026-41517
Last modified
CVE-2026-41517 is a none-severity vulnerability. Emlog is an open source website building system. Prior to version 2.6.11, insecure plugin upload functionality allows attackers to upload and execute arbitrary PHP code, leading to complete server compromise and persistent backdoor installation. EPSS estimates a 0.28% chance of exploitation in the next 30 days.
Description
Emlog is an open source website building system. Prior to version 2.6.11, insecure plugin upload functionality allows attackers to upload and execute arbitrary PHP code, leading to complete server compromise and persistent backdoor installation. This issue has been patched in version 2.6.11.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-41517?
How severe is CVE-2026-41517?
How do I fix CVE-2026-41517?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-41511OpenMcdf is a fully .NET / C# library to manipulate Compound…5.5
- CVE-2026-41512ai-scanner is an AI model safety scanner built on NVIDIA gar…9.9
- CVE-2026-41513Horilla is an HR and CRM software. In 1.5.0, the notificatio…4.8
- CVE-2026-41514OP-TEE is a Trusted Execution Environment (TEE) designed as …3.3
- CVE-2026-41515OP-TEE is a Trusted Execution Environment (TEE) designed as …3.3
- CVE-2026-41516OP-TEE is a Trusted Execution Environment (TEE) designed as …3.3
- CVE-2026-41518Chartbrew is an open-source web application that can connect…7.6
- CVE-2026-41519Weblate is a web based localization tool. Prior to version 5…5.4
- CVE-2026-4152GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code…7.8
- CVE-2026-41520Cilium is a networking, observability, and security solution…4.4
- CVE-2026-41521xrdp is an open source RDP server. Versions 0.10.6 and prior…9.1
- CVE-2026-41522Iris is a web collaborative platform that helps incident res…7.1
Are you affected by CVE-2026-41517?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST