{"id":"CVE-2026-39276","aliases":["EUVD-2026-33351","GHSA-w926-pxjj-3c5v"],"status":"published","title":"The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing...","description":"The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code. By uploading a malicious ZIP archive containing directory traversal sequences in filenames, an attacker can overwrite default template files or directly include malicious code files in the current template.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00782,"percentile":0.56437,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2026-05-29T00:00:00Z","modified":"2026-10-28T02:30:39Z","products":[{"vendor":"emlog","product":"emlog"}],"references":[{"url":"https://www.emlog.net/","tags":["Product","web"]},{"url":"https://github.com/LING12138-sg/Emlog-v2.6.9-Vulnerability-Report","tags":["exploit","Exploit","Mitigation","Third Party Advisory","package"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39276","tags":["advisory"]},{"url":"https://www.emlog.net"},{"url":"https://github.com/advisories/GHSA-w926-pxjj-3c5v"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39276.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-39276","description":"The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code. By uploading a malicious ZIP archive containing directory traversal sequences in filenames, an attacker can overwrite default template files or directly include malicious code files in the current template.","status":"published","published":"2026-05-29T00:00:00Z","modified":"2026-05-29T19:31:52.277Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:20:02.662847Z"}],"euvd":[{"id":"EUVD-2026-33351","description":"The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code. By uploading a malicious ZIP archive containing directory traversal sequences in filenames, an attacker can overwrite default template files or directly include malicious code files in the current template.","status":"published","published":"2026-05-29T00:00:00Z","modified":"2026-05-29T19:31:52Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:21:00.384456Z"}],"ghsa":[{"id":"GHSA-w926-pxjj-3c5v","title":"The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing...","description":"The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code. By uploading a malicious ZIP archive containing directory traversal sequences in filenames, an attacker can overwrite default template files or directly include malicious code files in the current template.","status":"published","published":"2026-05-29T18:31:34Z","modified":"2026-05-29T21:32:25Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:08:24.903932Z"}],"nvd":[{"id":"CVE-2026-39276","description":"The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code. By uploading a malicious ZIP archive containing directory traversal sequences in filenames, an attacker can overwrite default template files or directly include malicious code files in the current template.","status":"published","published":"2026-05-29T16:16:26.833Z","modified":"2026-07-21T15:10:00.103Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:12:21.244426Z"}],"osv":[{"id":"CVE-2026-39276","description":"The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code. By uploading a malicious ZIP archive containing directory traversal sequences in filenames, an attacker can overwrite default template files or directly include malicious code files in the current template.","status":"published","published":"2026-05-29T00:00:00Z","modified":"2026-10-28T02:30:39.974120898Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:03.040464Z"}]}}