FL
Vendor
Fluentd
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-44161 | FL Fluentd Fluentd | 7.2 | Jul 8 | Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http` |
| CVE-2026-44160 | FL Fluentd Fluentd | 7.5 | Jul 8 | Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward` |
| CVE-2026-44025 | FL Fluentd Fluentd | 7.5 | Jul 8 | Fluentd: Exposure of Sensitive Information via Monitor Agent API |
| CVE-2026-44024 | FL Fluentd Fluentd | 9.8 | Jul 8 | Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder |
| CVE-2020-21514 | FL Fluentd Fluentd | 8.8 | Apr 4 | An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password |
| CVE-2022-39379 | FL Fluentd Fluentd | 9.8 | Nov 2 | Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration) |
| CVE-2021-41186 | FL Fluentd Fluentd | 7.5 | Oct 29 | Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure |
| CVE-2017-10906 | FL Fluentd Fluentd | 9.8 | Dec 8 | Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via… |