CVE-2026-21429: Emlog has Broken Access Control (BAC)
Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete their articles after publishing them. As of time of publication, no known patched versions are available.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21429?
CVE-2026-21429 has not been assigned a specific severity rating, but it poses a serious risk due to user restrictions on content management.
How do I fix CVE-2026-21429?
Currently, there is no patched version available to fix CVE-2026-21429.
What impact does CVE-2026-21429 have on Emlog users?
CVE-2026-21429 prevents users from editing or deleting their articles after publication, which can lead to content management issues.
Which version of Emlog is affected by CVE-2026-21429?
CVE-2026-21429 affects Emlog version 2.5.23.
Are there any protective measures for CVE-2026-21429?
As of now, recommended protective measures against CVE-2026-21429 may involve restricting user access until a patch is released.