01 Record

CVE-2026-73849

emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.

CriticalPUBLISHEDCNA: GitHub_M

Base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

02 Description

emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.

Published: 2026-08-14 17:37Z1 HR AGO
Last updated: 2026-08-14 17:37Z1 HR AGO
Reserved: 2026-08-13
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: Critical (CVSS 9.8)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-306
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 0b29f0bbbc7b0818807502ce95761866c01f683abc5718fee21ecc2ede1ed46b

VendorProductVersionsPlatforms

emlogemlog<= 2.6.26—