CVE-2024-46540: Emlog

Medium severity, CVSS 6.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A remote code execution (RCE) vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and self-extract fucntions to upload webshells to the target server, thereby obtaining system privileges.

Affected products

• Emlog Emlog: before 2.3.15 (fixed in 2.3.15)

Published 2024-09-30. Last modified 2026-06-17.