CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2026/03/11 7:21 p.m.•9 views

CVE-2026-31954 Emlog asynchronous media file deletion missing CSRF protection

Emlog is an open source website building system. In 2.6.6 and earlier, the deleteasync action asynchronous delete lacks a call to LoginAuth::checkToken, enabling CSRF attacks...

5.8AI score

SaveExploits0References3

EUVD•added 2026/03/11 7:21 p.m.•8 views

EUVD-2026-11319

Emlog is an open source website building system. In 2.6.6 and earlier, the deleteasync action asynchronous delete lacks a call to LoginAuth::checkToken, enabling CSRF attacks...

5.8AI score0.0015EPSS

SaveExploits1References1

Vulnrichment•added 2026/03/11 7:21 p.m.•4 views

CVE-2026-31954 Emlog asynchronous media file deletion missing CSRF protection

Emlog is an open source website building system. In 2.6.6 and earlier, the deleteasync action asynchronous delete lacks a call to LoginAuth::checkToken, enabling CSRF attacks...

5.8AI score0.0015EPSS

SaveExploits1References1

Cvelist•added 2026/03/11 7:21 p.m.•60 views

CVE-2026-31954 Emlog asynchronous media file deletion missing CSRF protection

Emlog is an open source website building system. In 2.6.6 and earlier, the deleteasync action asynchronous delete lacks a call to LoginAuth::checkToken, enabling CSRF attacks...

0.0015EPSS

SaveExploits1References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by