CVE-2026-21429

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-21429

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-21429.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-21429

Aliases

GHSA-jw5v-2g53-rx8w

Published

2026-01-02T17:23:17.252Z

Modified

2026-07-15T01:48:52.659211527Z

Severity

2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

Emlog has Broken Access Control (BAC)

Details

Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete their articles after publishing them. As of time of publication, no known patched versions are available.

Database specific

{
    "cwe_ids": [
        "CWE-862"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/21xxx/CVE-2026-21429.json",
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/emlog/emlog

Affected ranges

Type

GIT

Repo

https://github.com/emlog/emlog

Events

Introduced

357cf42d18ae7dc6296728a737c16c835e9ec159

Last affected

357cf42d18ae7dc6296728a737c16c835e9ec159

Database specific

{
    "cpe": "cpe:2.3:a:emlog:emlog:2.5.23:*:*:*:pro:*:*:*",
    "extracted_events": [
        {
            "introduced": "= 2.5.23"
        },
        {
            "last_affected": "= 2.5.23"
        },
        {
            "introduced": "2.5.23"
        },
        {
            "last_affected": "2.5.23"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ]
}

Affected versions

2.*

2.5.23

= 2.*

= 2.5.23

pro-2.*

pro-2.5.23

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-21429.json"