IlhomjonR/CVE-2026-67598

PoC

CVE-2026-67598 — Emlog Pro: disabled TLS certificate validation in AI assistant (MITM → API-key theft). CWE-295, CVSS 9.1. Reported by @IlhomjonR.

view exploit source poc_in_githubauthor IlhomjonRpublished 2026-08-06catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-67598US	—	0.26% (18th)	Exploit	2026-08-03
Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows network-adjacent attackers to intercept outbound HTTPS r…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.