RS
Product
rsyslog
21
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 4High 6Medium 4Low 0
Watch
Add rsyslog to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-55556 | 8.2 | Sep 18 | Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling Affected: >= 8.2110.0, < 8.2604.0 |
| CVE-2026-92709 New | 8.1 | Oct 22 | Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE Affected: >= 1.15.0, <= 8.2610.0 |
| CVE-2026-61548 | 8.1 | Sep 18 | Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data Affected: >= 7.5.4, < 8.2606.0 |
| CVE-2022-24903 | 8.1 | May 6 | Rsyslog is a rocket-fast system for log processing Affected: before 8.2204.1 |
| CVE-2026-19654 | 7.5 | Aug 12 | Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd Affected: 8.36.0 before 8.2608.0 |
| CVE-2018-16881 | 7.5 | Jan 25 | A denial of service vulnerability was found in rsyslog in the imptcp module Affected: before 8.27.0 |
Showing 6