CVE-2026-42286
Last modified
CVE-2026-42286 is a high-severity vulnerability rated 8.4/10 on the CVSS scale. Emlog is an open source website building system. Prior to version 2.6.11, missing CSRF protection in critical admin functions allows attackers to trick authenticated administrators into performing unauthorized actions like system registration, plugin management, and configuration changes. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
Emlog is an open source website building system. Prior to version 2.6.11, missing CSRF protection in critical admin functions allows attackers to trick authenticated administrators into performing unauthorized actions like system registration, plugin management, and configuration changes. This issue has been patched in version 2.6.11.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-42286?
How severe is CVE-2026-42286?
How do I fix CVE-2026-42286?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-42280Auth0.js is a client-side JavaScript library for Auth0. From…7.1
- CVE-2026-42281MagicMirror² is an open source modular smart mirror platform…8.6
- CVE-2026-42282n8n-MCP is an MCP server that provides AI assistants access …4.3
- CVE-2026-42283DevSpace is a client-only developer tool for cloud-native de…7.8
- CVE-2026-42284GitPython is a python library used to interact with Git repo…9.8
- CVE-2026-42285GoBGP is an open source Border Gateway Protocol (BGP) implem…7.5
- CVE-2026-42287Emlog is an open source website building system. Prior to ve…10
- CVE-2026-42288ChurchCRM is an open-source church management system. Prior …10
- CVE-2026-42289ChurchCRM is an open-source church management system. Prior …8.8
- CVE-2026-4229A flaw has been found in vanna-ai vanna up to 2.0.2. This im…7.3
- CVE-2026-42290protobufjs-cli is the command line add-on for protobuf.js. P…7.8
- CVE-2026-42291SysReptor is a fully customizable pentest reporting platform…6.8
Are you affected by CVE-2026-42286?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST