GR
Vendor
Graylog2
15
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-69190 | GR graylog2-server Graylog2 | 6.3 | Sep 21 | Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards |
| CVE-2026-92789 | GR graylog2-server Graylog2 | 6.5 | Sep 16 | Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirect |
| CVE-2026-55867 | GR graylog2-server Graylog2 | 5.3 | Aug 28 | Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens |
| CVE-2026-55841 | GR graylog2-server Graylog2 | 7.5 | Aug 28 | Graylog: Fortigate syslog message parser can be exploited to modify or delete fields from the original message |
| CVE-2026-55425 | GR graylog2-server Graylog2 | 5.0 | Aug 28 | Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields |
| CVE-2026-65011 | GR graylog2-server Graylog2 | 4.3 | Jul 22 | Graylog2 Server Missing Permission Check on Event Definition Duplicate |
| CVE-2025-53106 | GR graylog2-server Graylog2 | 8.8 | Jul 2 | Graylog vulnerable to privilege escalation through API tokens |
| CVE-2025-46827 | GR graylog2-server Graylog2 | 5.4 | May 7 | Graylog Allows Session Takeover via Insufficient HTML Sanitization |
| CVE-2025-30373 | GR graylog2-server Graylog2 | 5.3 | Apr 7 | Graylog Authenticated HTTP inputs do ingest message even if Authorization header is missing or has wrong value |
| CVE-2024-52506 | GR graylog2-server Graylog2 | 6.5 | Nov 18 | Graylog can leak other users' reports via concurrent PDF report rendering |
| CVE-2024-24824 | GR graylog2-server Graylog2 | 8.8 | Feb 7 | graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request |
| CVE-2024-24823 | GR graylog2-server Graylog2 | 4.4 | Feb 7 | graylog2-server Session Fixation vulnerability through cookie injection |
| CVE-2023-41045 | GR graylog2-server Graylog2 | 5.3 | Aug 31 | Insecure source port usage for DNS queries in Graylog |
| CVE-2023-41044 | GR graylog2-server Graylog2 | 3.8 | Aug 31 | Partial path traversal vulnerability in Support Bundle feature of Graylog |
| CVE-2023-41041 | GR graylog2-server Graylog2 | 3.1 | Aug 30 | User session is still usable after logout in graylog2-server |