Emoncms vulnerabilities

2 known vulnerabilities in Emoncms from Openenergymonitor. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Emoncms 11.7.3 has a remote code execution vulnerability in the firmware upload feature that…

  CVE-2025-60938Oct 24, 2025Openenergymonitor

  Emoncms 11.7.3 has a remote code execution vulnerability in the firmware upload feature that allows authenticated users to execute arbitrary commands on the target system. The vulnerability stems from insufficient input validation of user-controlled parameters

• 9.8 Critical severity

  Emoncms: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-22992Feb 6, 2025Openenergymonitor

  A SQL Injection vulnerability exists in the /feed/insert.json endpoint of the Emoncms project >= 11.6.9. The vulnerability is caused by improper handling of user-supplied input in the data query parameter, allowing attackers to execute arbitrary SQL commands u