A vulnerability classified as problematic has been found in Emlog up to 2.6.2. This issue affects the function
require_once of the file admin/plugin.php. This manipulation of the argument plugin causes improper control of filename for include/require statement in php program (‘php remote file inclusion’).
The identification of this vulnerability is CVE-2026-34787. It is possible to initiate the attack remotely. There is no exploit available.
