Graylog2 vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 20243
3. 20253
4. 20266

Newest CVEs

• CVE-2026-69190

  Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

  Graylog2 · graylog2-server

  Medium6.3
• CVE-2026-92789

  Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirect

  Graylog2 · graylog2-server

  High7.1
• CVE-2026-55867

  Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens

  Graylog2 · graylog2-server

  Medium5.3
• CVE-2026-55841

  Graylog: Fortigate syslog message parser can be exploited to modify or delete fields from the original message

  Graylog2 · graylog2-server

  High7.5
• CVE-2026-55425

  Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields

  Graylog2 · graylog2-server

  Medium5.0
• CVE-2026-65011

  Graylog2 Server Missing Permission Check on Event Definition Duplicate

  Graylog2 · graylog2-server

  Medium5.3
• CVE-2025-53106

  Graylog vulnerable to privilege escalation through API tokens

  Graylog2 · graylog2-server

  High8.8
• CVE-2025-46827

  Graylog Allows Session Takeover via Insufficient HTML Sanitization

  Graylog2 · graylog2-server

  High8.0
• CVE-2025-30373

  Graylog Authenticated HTTP inputs do ingest message even if Authorization header is missing or has wrong value

  Graylog2 · graylog2-server

  Medium6.5
• CVE-2024-52506

  Graylog can leak other users' reports via concurrent PDF report rendering

  Graylog2 · graylog2-server

  High7.1