Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Emlog is an open source website building system. Prior to version 2.6.11, missing CSRF protection in critical admin functions allows attackers to trick authenticated administrators into performing unauthorized actions like system registration, plugin management, and configuration changes. This issue has been patched in version 2.6.11.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
CVE-2026-42286 Emlog is an open source website building system. Prior to version 2.6.11, missing CSRF protection in critical admin functions allows attackers to trick authenticated … https://www.cve.org/CVERecord?id=CVE-2026-42286
Post summary
The text reports that Emlog’s pre‑2.6.11 versions suffer from a CSRF flaw in admin functions, noting that the issue is resolved in version 2.6.11.
CVE-2026-42286 Cross-Site Request Forgery in Emlog Prior to Version 2.6.11 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42286
Post summary
This brief disclosure identifies a CSRF flaw in Emlog that is present in versions before 2.6.11, indicating that updating to 2.6.11 resolves the issue, with no exploitation or PoC details provided.