CVE-2026-94174: Webfactory Email Log

High severity, CVSS 7.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Administrator SQL Injection in Email Log <= 2.63 versions.

Affected products

• Webfactory Email Log: up to and including 2.63

Published 2026-09-23. Last modified 2026-09-23.