CVE-2026-73850

HIGH

CVE: CVE-2026-73850 - Emlog is an open source website building systemSign in to save

CVSS

8.6

CVSS v4.0

EPSS

N/A

Exploit Prediction Score

Published

August 14, 2026

Exploitability

No EPSS data available

Description

Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vulnerability in the queryDatabase function in ai.php.

Weaknesses

CWE-89

Affected Packages

No package data available.

Aliases

CVE-2026-73850

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://github.com/emlog/emlog/security/advisories/GHSA-jffg-rpvp-2qx7