CVE-2019-16868: Emlog

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traversal sequences in the bak[] parameter.

Affected products

• Emlog Emlog: up to and including 5.3.1; version 6.0.0 only

Published 2019-09-25. Last modified 2026-06-17.