Login Request a demo
FL
Product
Fluentd
by Fluentd · last CVE Jul 8, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 3High 5Medium 0Low 0
Severity
All severities8Critical3High5Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Fluentd to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44024
9.8
1%
Jul 8
Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder
Affected: before 1.19.3
CVE-2022-39379
9.8
45%
Nov 2
Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)
Affected: 1.13.2 before 1.15.3
CVE-2017-10906
9.8
5%
Dec 8
Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via…
Affected: 0.12.29; 0.12.30; 0.12.31; 0.12.32; 0.12.33; 0.12.34; +6 more
CVE-2020-21514
8.8
1%
Apr 4
An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password
Affected: 1.8.0
CVE-2026-44160
7.5
1%
Jul 8
Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`
Affected: before 1.19.3
CVE-2026-44025
7.5
0%
Jul 8
Fluentd: Exposure of Sensitive Information via Monitor Agent API
Affected: before 1.19.3
CVE-2021-41186
7.5
2%
Oct 29
Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure
Affected: 0.14.14 through 1.14.1
CVE-2026-44161
7.2
0%
Jul 8
Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`
Affected: before 1.19.3
Showing 8