CVE-2026-21429 | THREATINT

Description

Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete their articles after publishing them. As of time of publication, no known patched versions are available.

PUBLISHED Reserved 2025-12-29 | Published 2026-01-02 | Updated 2026-01-02 | Assigner GitHub_M

LOW: 2.0CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Problem types

CWE-862: Missing Authorization

Product status

= 2.5.23

affected

References

github.com/.../emlog/security/advisories/GHSA-jw5v-2g53-rx8w

cve.org (CVE-2026-21429)

nvd.nist.gov (CVE-2026-21429)

Download JSON