Vendors / fluent Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 5
Exploited now fluent records in CISA KEV No fluent vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 75
Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows.
CVSS 4.0 CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.0072 · Published 2026-09-21 · Fixed in 5.0.8 CWE-121
Priority HIGH 71
Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.44983 · Published 2022-11-02 · Partial fix · 1.15.3 CWE-502
Priority MEDIUM 51
Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01085 · Published 2026-07-08 · Fixed in 1.19.3 CWE-22
Priority MEDIUM 49
Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04581 · Published 2017-12-08 · Partial fix · 0.12.41
Priority MEDIUM 41
An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00786 · Published 2023-04-04 · No fix listed CWE-276
Priority MEDIUM 40
Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0062 · Published 2026-07-08 · Fixed in 1.19.3 CWE-409
Priority LOW 39
Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00474 · Published 2026-07-08 · Fixed in 1.19.3 CWE-306
Priority LOW 38
Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on.
CVSS 3.1 HIGH 7.2· Network · No auth · No interaction · EPSS 0.00442 · Published 2026-07-08 · Fixed in 1.19.3 CWE-918
Priority LOW 37
Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02215 · Published 2021-10-29 · Partial fix · 1.14.2 CWE-400
Priority LOW 14
fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd.
CVSS 3.1 LOW 2.7· Network · High privileges · No interaction · EPSS 0.00483 · Published 2026-09-14 · Fixed in 1.8.5 CWE-409
Open these records in search → All records by CVSS severity
4 5 0 1 0
THREATIST.IORead the docs