Graylog2

Records28All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Graylog2 records in CISA KEV

No Graylog2 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Graylog 22 records HIGH

Records

28 records

TI-2024-16341 CVE-2024-24824 · GHSA-p6gg-5hf4-4rgj

graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request

HIGH 77

Graylog is a free and open log management platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.34739 Published 2024-02-07 Fixed in 5.1.11, 5.2.4 CWE-284

TI-2023-21671 CVE-2023-41045 · GHSA-g96c-x7rh-99r3

Insecure source port usage for DNS queries in Graylog

MEDIUM 57

Graylog is a free and open log management platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00358 Published 2023-08-31 Fixed in 5.0.9, 5.1.3 CWE-345

TI-2026-01133 CVE-2026-1435 · GHSA-3crm-x896-j73p

Incorrect management of session invalidation vulnerability in Graylog Web Interface

MEDIUM 48

Not properly invalidated session vulnerability in Graylog Web Interface, version 2.2.3, due to incorrect management of session invalidation after new logins.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00418 Published 2026-02-18 No fix listed CWE-613

TI-2023-21667 CVE-2023-41041 · GHSA-3fqm-frhg-7c85

User session is still usable after logout in graylog2-server

MEDIUM 48

Graylog is a free and open log management platform.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00482 Published 2023-08-30 Fixed in 5.1.3, 5.0.9 CWE-613

TI-2021-15624 CVE-2021-37760 · GHSA-p36q-cc77-7334

A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate…

MEDIUM 45

A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01286 Published 2021-07-31 No fix listed CWE-532

TI-2021-15623 CVE-2021-37759 · GHSA-f9j4-c45h-7xwv

A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to…

MEDIUM 45

A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01286 Published 2021-07-31 No fix listed CWE-532

TI-2026-40305 CVE-2026-55841 · GHSA-gqr6-r77p-c2pj

Graylog: Fortigate syslog message parser can be exploited to modify or delete fields from the original message

MEDIUM 40

Graylog is a free and open log management platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00633 Published 2026-08-28 Fixed in 6.3.12, 7.0.7 +1 CWE-138

TI-2025-33099 CVE-2025-53106 · GHSA-3m86-c9x3-vwm9

Graylog vulnerable to privilege escalation through API tokens

LOW 39

Graylog is a free and open log management platform.

CVSS 4.0HIGH 8.8 Network Low privileges User interaction EPSS 0.00608 Published 2025-07-02 Fixed in 6.2.4, 6.3.0-rc.2 CWE-285

TI-2025-29460 CVE-2025-46827 · GHSA-76vf-mpmx-777j

Graylog Allows Session Takeover via Insufficient HTML Sanitization

LOW 37

Graylog is a free and open log management platform.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00292 Published 2025-05-07 Fixed in 6.0.14, 6.1.10 CWE-79

TI-2020-12444 CVE-2020-15813 · GHSA-3gg9-f3vh-866f

Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers.

LOW 37

Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00779 Published 2020-07-17 Fixed in 3.3.3 CWE-295

TI-2024-35177 CVE-2024-52506 · GHSA-vggm-3478-vm5m

Graylog can leak other users' reports via concurrent PDF report rendering

LOW 32

Graylog is a free and open log management platform.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00632 Published 2024-11-18 Fixed in 6.1.2 CWE-200

TI-2026-62530 CVE-2026-92789 · GHSA-pgwr-3c66-c473

Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirect

LOW 31

Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00415 Published 2026-09-16 No fix listed CWE-918

TI-2026-01134 CVE-2026-1436 · GHSA-ff7j-jwgr-hgxp

Improper Access Control (IDOR) vulnerability in Graylog Web Interface

LOW 31

Improper Access Control (IDOR) in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00246 Published 2026-02-18 No fix listed CWE-639

TI-2026-01135 CVE-2026-1437 · GHSA-5hp8-hwcv-h225

Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

LOW 30

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00242 Published 2026-02-18 No fix listed CWE-79

TI-2026-01139 CVE-2026-1441 · GHSA-cf26-rj67-f4wr

Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

LOW 29

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00225 Published 2026-02-18 No fix listed CWE-79

TI-2026-01138 CVE-2026-1440 · GHSA-47m2-7g75-xvrp

Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

LOW 29

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00225 Published 2026-02-18 No fix listed CWE-79

TI-2026-01137 CVE-2026-1439 · GHSA-49xw-73mm-8fw9

Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

LOW 29

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00213 Published 2026-02-18 No fix listed CWE-79

TI-2026-01136 CVE-2026-1438 · GHSA-cw7v-qx8m-563q

Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

LOW 29

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00213 Published 2026-02-18 No fix listed CWE-79

TI-2025-21679 CVE-2025-30373 · GHSA-q7g5-jq6p-6wvx

Graylog Authenticated HTTP inputs do ingest message even if Authorization header is missing or has wrong value

LOW 29

Graylog is a free and open log management platform.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00336 Published 2025-04-07 Fixed in 6.1.9 CWE-285

TI-2018-10315 CVE-2018-14380 · GHSA-38hf-xjmx-jrh8

In Graylog before 2.4.6, XSS was possible in typeahead components, related to…

LOW 29

In Graylog before 2.4.6, XSS was possible in typeahead components, related to components/common/TypeAheadInput.jsx and components/search/QueryInput.ts.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00979 Published 2018-07-18 Fixed in 2.4.6 CWE-79

TI-2018-08336 CVE-2018-11651 · GHSA-435g-r2m8-gjvm

Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names…

LOW 29

Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00795 Published 2018-06-01 Fixed in 2.4.4 CWE-79

TI-2018-08335 CVE-2018-11650 · GHSA-h7g4-65mf-6mxh

Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications…

LOW 29

Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00835 Published 2018-06-01 Fixed in 2.4.4 CWE-79

TI-2026-48540 CVE-2026-69190 · GHSA-m9c2-85gv-8xr5

Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

LOW 28

Graylog is a free and open log management platform.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00423 Published 2026-09-21 Fixed in 6.3.14, 7.0.9 +1 CWE-639

TI-2024-16340 CVE-2024-24823 · GHSA-3xf8-g8gr-g7rh

graylog2-server Session Fixation vulnerability through cookie injection

LOW 26

Graylog is a free and open log management platform.

CVSS 3.1MEDIUM 5.7 Network High privileges User interaction EPSS 0.00414 Published 2024-02-07 Fixed in 5.1.11, 5.2.4 CWE-384

TI-2026-40326 CVE-2026-55867 · GHSA-j769-9gv9-65gr

Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens

LOW 25

Graylog is a free and open log management platform.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00565 Published 2026-08-28 Fixed in 6.3.12, 7.0.7 +1 CWE-639

Open these records in search →