syslog-ng

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

syslog-ng records in CISA KEV

No syslog-ng vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-28758 CVE-2026-39879

SQL injection in syslog-ng SQL destionation driver

LOW 31

Due to a missing sanitization call in [`afsql_dd_run_query`](https://github.com/syslog-ng/syslog-ng/blob/649e6e18e3459fb4467000a88dfb12fa97f9719c/modules/afsql/afsql.c#L219), syslog-ng before 4.12 are vulnerable to SQL i…

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.0027 Published 2026-07-20 Fixed in 4.12 CWE-150

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0