A vulnerability identified as problematic has been detected in Emlog up to 2.6.6. The impacted element is the function
LoginAuth::checkToken. The manipulation leads to cross-site request forgery.
This vulnerability is referenced as CVE-2026-31954. Remote exploitation of the attack is possible. No exploit is available.
