We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2026-41517

CVE-2026-41517

PHP

Severity: —
CVSS: —CVSS
Published: 2026-05-08
Last modified: 2026-05-08
CWE: CWE-434

Description

Emlog is an open source website building system. Prior to version 2.6.11, insecure plugin upload functionality allows attackers to upload and execute arbitrary PHP code, leading to complete server compromise and persistent backdoor installation. This issue has been patched in version 2.6.11.

References

https://github.com/emlog/emlog/security/advisories/GHSA-8qwx-6jx6-94x4

Summary

Description

References