Vulnerabilities

TI-2026-48540 CVE-2026-69190 · GHSA-m9c2-85gv-8xr5

Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

LOW 28

Graylog is a free and open log management platform.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00423 Published 2026-09-21 Fixed in 6.3.14, 7.0.9 +1 CWE-639

TI-2026-62530 CVE-2026-92789 · GHSA-pgwr-3c66-c473

Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirect

LOW 31

Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00415 Published 2026-09-16 No fix listed CWE-918

TI-2026-40326 CVE-2026-55867 · GHSA-j769-9gv9-65gr

Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens

LOW 25

Graylog is a free and open log management platform.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00565 Published 2026-08-28 Fixed in 6.3.12, 7.0.7 +1 CWE-639

TI-2026-40305 CVE-2026-55841 · GHSA-gqr6-r77p-c2pj

Graylog: Fortigate syslog message parser can be exploited to modify or delete fields from the original message

MEDIUM 40

Graylog is a free and open log management platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00633 Published 2026-08-28 Fixed in 6.3.12, 7.0.7 +1 CWE-138

TI-2026-39993 CVE-2026-55425 · GHSA-q79r-r9xg-r863

Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields

LOW 23

Graylog is a free and open log management platform.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00412 Published 2026-08-28 Fixed in 7.1.4, 7.2.0-alpha.2 CWE-213

TI-2026-46449 CVE-2026-65011 · GHSA-p2j9-4mg8-mm73

Graylog2 Server Missing Permission Check on Event Definition Duplicate

LOW 24

Graylog2 Server before commit 46a2eeb contains a missing per-entity permission check in the POST /events/definitions/{definitionId}/duplicate endpoint that allows authenticated users to clone any event definition.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00378 Published 2026-07-22 Fixed CWE-862

TI-2026-01139 CVE-2026-1441 · GHSA-cf26-rj67-f4wr

Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

LOW 29

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00225 Published 2026-02-18 No fix listed CWE-79

TI-2026-01138 CVE-2026-1440 · GHSA-47m2-7g75-xvrp

Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

LOW 29

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00225 Published 2026-02-18 No fix listed CWE-79

TI-2026-01137 CVE-2026-1439 · GHSA-49xw-73mm-8fw9

Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

LOW 29

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00213 Published 2026-02-18 No fix listed CWE-79

TI-2026-01136 CVE-2026-1438 · GHSA-cw7v-qx8m-563q

Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

LOW 29

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00213 Published 2026-02-18 No fix listed CWE-79

TI-2026-01135 CVE-2026-1437 · GHSA-5hp8-hwcv-h225

Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

LOW 30

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00242 Published 2026-02-18 No fix listed CWE-79

TI-2026-01134 CVE-2026-1436 · GHSA-ff7j-jwgr-hgxp

Improper Access Control (IDOR) vulnerability in Graylog Web Interface

LOW 31

Improper Access Control (IDOR) in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00246 Published 2026-02-18 No fix listed CWE-639

TI-2026-01133 CVE-2026-1435 · GHSA-3crm-x896-j73p

Incorrect management of session invalidation vulnerability in Graylog Web Interface

MEDIUM 48

Not properly invalidated session vulnerability in Graylog Web Interface, version 2.2.3, due to incorrect management of session invalidation after new logins.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00418 Published 2026-02-18 No fix listed CWE-613

TI-2025-33099 CVE-2025-53106 · GHSA-3m86-c9x3-vwm9

Graylog vulnerable to privilege escalation through API tokens

LOW 39

Graylog is a free and open log management platform.

CVSS 4.0HIGH 8.8 Network Low privileges User interaction EPSS 0.00608 Published 2025-07-02 Fixed in 6.2.4, 6.3.0-rc.2 CWE-285

TI-2025-29460 CVE-2025-46827 · GHSA-76vf-mpmx-777j

Graylog Allows Session Takeover via Insufficient HTML Sanitization

LOW 37

Graylog is a free and open log management platform.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00292 Published 2025-05-07 Fixed in 6.0.14, 6.1.10 CWE-79

TI-2025-21679 CVE-2025-30373 · GHSA-q7g5-jq6p-6wvx

Graylog Authenticated HTTP inputs do ingest message even if Authorization header is missing or has wrong value

LOW 29

Graylog is a free and open log management platform.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00336 Published 2025-04-07 Fixed in 6.1.9 CWE-285

TI-2024-35177 CVE-2024-52506 · GHSA-vggm-3478-vm5m

Graylog can leak other users' reports via concurrent PDF report rendering

LOW 32

Graylog is a free and open log management platform.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00632 Published 2024-11-18 Fixed in 6.1.2 CWE-200

TI-2024-16341 CVE-2024-24824 · GHSA-p6gg-5hf4-4rgj

graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request

HIGH 77

Graylog is a free and open log management platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.34739 Published 2024-02-07 Fixed in 5.1.11, 5.2.4 CWE-284

TI-2024-16340 CVE-2024-24823 · GHSA-3xf8-g8gr-g7rh

graylog2-server Session Fixation vulnerability through cookie injection

LOW 26

Graylog is a free and open log management platform.

CVSS 3.1MEDIUM 5.7 Network High privileges User interaction EPSS 0.00414 Published 2024-02-07 Fixed in 5.1.11, 5.2.4 CWE-384

TI-2023-21671 CVE-2023-41045 · GHSA-g96c-x7rh-99r3

Insecure source port usage for DNS queries in Graylog

MEDIUM 57

Graylog is a free and open log management platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00358 Published 2023-08-31 Fixed in 5.0.9, 5.1.3 CWE-345

TI-2023-21670 CVE-2023-41044 · GHSA-2q4p-f6gf-mqr5

Partial path traversal vulnerability in Support Bundle feature of Graylog

LOW 19

Graylog is a free and open log management platform.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00698 Published 2023-08-31 Fixed in 5.1.3 CWE-22

TI-2023-21667 CVE-2023-41041 · GHSA-3fqm-frhg-7c85

User session is still usable after logout in graylog2-server

MEDIUM 48

Graylog is a free and open log management platform.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00482 Published 2023-08-30 Fixed in 5.1.3, 5.0.9 CWE-613

TI-2021-15623 CVE-2021-37759 · GHSA-f9j4-c45h-7xwv

A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to…

MEDIUM 45

A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01286 Published 2021-07-31 No fix listed CWE-532

TI-2021-15624 CVE-2021-37760 · GHSA-p36q-cc77-7334

A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate…

MEDIUM 45

A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01286 Published 2021-07-31 No fix listed CWE-532

TI-2020-12444 CVE-2020-15813 · GHSA-3gg9-f3vh-866f

Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers.

LOW 37

Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00779 Published 2020-07-17 Fixed in 3.3.3 CWE-295

Vulnerabilities

Filters