A vulnerability was identified in elunez eladmin up to 2.7. This affects the function queryErrorLogDetail of the file /api/logs/error/1 of the component SysLogController. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-10084
• https://vuldb.com/?ctiid.323040
• https://vuldb.com/?id.323040
• https://vuldb.com/?submit.644658
• https://www.cnblogs.com/aibot/p/19063331