CVE-2026-31954

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

Emlog is an open source website building system. In 2.6.6 and earlier, the delete_async action (asynchronous delete) lacks a call to LoginAuth::checkToken(), enabling CSRF attacks.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
emlog	emlog	<= 2.6.6

References

https://github.com/emlog/emlog/security/advisories/GHSA-xc26-93qj-rcrwExploit, Vendor Advisory

Timeline

Published: Mar 11, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-319554.9Xibo is an open source digital signage platform with a web content management system and Windows display player software. An authenticated S CVE-2026-319564.3Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to version 4 CVE-2026-3195710.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 3.0.0 to before 3.1.0, if Himmelblau is deployed witho CVE-2026-319587.5Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number o CVE-2026-319595.3Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains a Server-Side Request Forg CVE-2026-31965.5An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious guest can provide out CVE-2026-319605.3Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 has unbounded reads of HTTP respons CVE-2026-319615.5Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains an unbounded memory alloca CVE-2026-319628.8HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment dat CVE-2026-319638.1HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment dat CVE-2026-319647.5HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment dat CVE-2026-319658.2HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment dat