CVE-2020-21654: Emlog

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file.

Affected products

• Emlog Emlog: version 6.0.0 only

Published 2021-10-06. Last modified 2026-06-17.