Access Control Vulnerability in Emlog Website Building System
CVE-2026-21429

2LOW

Key Information:

Vendor

Emlog

Status
Emlog
Vendor
CVE Published:
2 January 2026

What is CVE-2026-21429?

Emlog, an open source website building system, has an identified access control vulnerability in version 2.5.23. This flaw allows administrators to enforce settings that restrict users from editing or deleting their articles after they have been published. As it stands, there are no patched versions available to address this issue, leaving users at risk. Organizations using Emlog should review their security policies and consider implementing additional safeguards until a fix is released.

Affected Version(s)

emlog = 2.5.23

References

https://github.com/emlog/emlog/security/advisories/GHSA-j...
x_refsource_CONFIRM

CVSS V4

Score:
2
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.