GR
Vendor
Graylog
29
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-1441 | GW Graylog Web Interface Graylog | 6.1 | Feb 18 | Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface |
| CVE-2026-1440 | GW Graylog Web Interface Graylog | 6.1 | Feb 18 | Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface |
| CVE-2026-1439 | GW Graylog Web Interface Graylog | 6.1 | Feb 18 | Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface |
| CVE-2026-1438 | GW Graylog Web Interface Graylog | 6.1 | Feb 18 | Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface |
| CVE-2026-1437 | GW Graylog Web Interface Graylog | 6.1 | Feb 18 | Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface |
| CVE-2026-1436 | GW Graylog Web Interface Graylog | 6.5 | Feb 18 | Improper Access Control (IDOR) vulnerability in Graylog Web Interface |
| CVE-2026-1435 | GW Graylog Web Interface Graylog | 9.8 | Feb 18 | Incorrect management of session invalidation vulnerability in Graylog Web Interface |
| CVE-2025-53106 | GR Graylog Graylog | 8.8 | Jul 2 | Graylog vulnerable to privilege escalation through API tokens |
| CVE-2025-46827 | GR Graylog Graylog | 5.4 | May 7 | Graylog Allows Session Takeover via Insufficient HTML Sanitization |
| CVE-2025-30373 | GR Graylog Graylog | 5.3 | Apr 7 | Graylog Authenticated HTTP inputs do ingest message even if Authorization header is missing or has wrong value |
| CVE-2024-52506 | GR Graylog Graylog | 6.5 | Nov 18 | Graylog can leak other users' reports via concurrent PDF report rendering |
| CVE-2024-24824 | GR Graylog Graylog | 8.8 | Feb 7 | Graylog is a free and open log management platform |
| CVE-2024-24823 | GR Graylog Graylog | 4.4 | Feb 7 | Graylog is a free and open log management platform |
| CVE-2023-41045 | GR Graylog Graylog | 5.3 | Aug 31 | Graylog is a free and open log management platform |
| CVE-2023-41044 | GR Graylog Graylog | 3.8 | Aug 31 | Graylog is a free and open log management platform |
| CVE-2023-41041 | GR Graylog Graylog | 3.1 | Aug 30 | Graylog is a free and open log management platform |
| CVE-2021-37760 | GR Graylog Graylog | 9.8 | Jul 31 | A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID) |
| CVE-2021-37759 | GR Graylog Graylog | 9.8 | Jul 31 | A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID) |
| CVE-2020-15813 | GR Graylog Graylog | 8.1 | Jul 17 | Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers |
| CVE-2018-14380 | GR Graylog Graylog | 6.1 | Jul 18 | In Graylog before 2.4.6, XSS was possible in typeahead components, related to components/common/TypeAheadInput.jsx and components/search/QueryInput.ts |
| CVE-2018-11651 | GR Graylog Graylog | 6.1 | Jun 1 | Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx,… |
| CVE-2018-11650 | GR Graylog Graylog | 6.1 | Jun 1 | Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js |