Graylog2 - vulnerabilities (CVEs)

15 CVEs in 1 products, 0 in the last 30 days, newest from 2026-09-21.

Products

• Graylog2-server - 15 CVEs

Newest CVEs of Graylog2

• CVE-2026-69190 - CVSS 6.3 (medium), 2026-09-21: Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a…
• CVE-2026-92789 - CVSS 7.1 (high), 2026-09-16: Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects. Attackers…
• CVE-2026-55867 - CVSS 5.3 (medium), 2026-08-28: Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken} endpoint…
• CVE-2026-55841 - CVSS 7.5 (high), 2026-08-28: Graylog is a free and open log management platform. Prior to Graylog Server versions 6.3.12, 7.0.7, and 7.1.2 and Graylog Forwarder version 7.3, the FortiGate…
• CVE-2026-55425 - CVSS 5 (medium), 2026-08-28: Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in…
• CVE-2026-65011 - CVSS 5.3 (medium), 2026-07-22: Graylog2 Server before commit 46a2eeb contains a missing per-entity permission check in the POST /events/definitions/{definitionId}/duplicate endpoint that…
• CVE-2025-53106 - CVSS 8.8 (high), 2025-07-02: Graylog is a free and open log management platform. In versions 6.2.0 to before 6.2.4 and 6.3.0-alpha.1 to before 6.3.0-rc.2, Graylog users can gain elevated…
• CVE-2025-46827 - CVSS 8 (high), 2025-05-07: Graylog is a free and open log management platform. Prior to versions 6.0.14, 6.1.10, and 6.2.0, it is possible to obtain user session cookies by submitting…
• CVE-2025-30373 - CVSS 6.5 (medium), 2025-04-07: Graylog is a free and open log management platform. Starting with 6.1, HTTP Inputs can be configured to check if a specified header is present and has a…
• CVE-2024-52506 - CVSS 7.1 (high), 2024-11-18: Graylog is a free and open log management platform. The reporting functionality in Graylog allows the creation and scheduling of reports which contain…
• CVE-2024-24824 - CVSS 8.8 (high), 2024-02-07: Graylog is a free and open log management platform. Starting in version 2.0.0 and prior to versions 5.1.11 and 5.2.4, arbitrary classes can be loaded and…
• CVE-2024-24823 - CVSS 5.7 (medium), 2024-02-07: Graylog is a free and open log management platform. Starting in version 4.3.0 and prior to versions 5.1.11 and 5.2.4, reauthenticating with an existing…
• CVE-2023-41045 - CVSS 5.3 (medium), 2023-08-31: Graylog is a free and open log management platform. Graylog makes use of only one single source port for DNS queries. Graylog binds a single socket for…
• CVE-2023-41044 - CVSS 3.8 (low), 2023-08-31: Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's `Support Bundle` feature. The vulnerability is…
• CVE-2023-41041 - CVSS 3.1 (low), 2023-08-30: Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used…