CVE-2026-39276

The open-source blog system Emlog Pro v2.6.9 contains a path traversal vulnerability within its template upload feature. This flaw occurs when the application uses user-supplied input to construct a pathname for file operations. An authenticated administrator can exploit this by uploading a malic...