Graylog2__graylog2-server_CVE-2023-41044_5-1-2

Graylog Welcome! Graylog is an open source log management platform. You can read more about the project on our website and check out the documentation on the documentation site. Issue Tracking Found a bug? Have an idea for an improvement? Feel free to add an issue. Contributing Help us build the...

com.automationrockstars:gunter-rabbit (>=1.0.2, <=2.0.3), com.rabbitmq.jms:rabbitmq-jms (1.4.7) +4 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.6.2)

com.rabbitmq:amqp-client MAVEN version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.automationrockstars:gunter-rabbit =1.0.2, =1.1.1, =3.3.0.cr1, =3.3.0.cr1, =2.1.0-alpha.1, =2.1.0-alpha.2...

com.automationrockstars:gunter-rabbit (>=1.0.2, <=2.0.3), com.rabbitmq.jms:rabbitmq-jms (1.4.7) +4 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.6.2)

com.rabbitmq:amqp-client MAVEN version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.automationrockstars:gunter-rabbit =1.0.2, =1.1.1, =3.3.0.cr1, =3.3.0.cr1, =2.1.0-alpha.1, =2.1.0-alpha.2...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.3.0) +3 more potentially affected by CVE-2026-69190 via org.graylog2:graylog2-server (>=6.3.0, <=6.3.13)

org.graylog2:graylog2-server MAVEN version =6.3.0, =6.3.0, =6.3.0, =6.3.13 Source cves: CVE-2026-69190 Source advisory: OSV:GHSA-M9C2-85GV-8XR5...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.3.0) +3 more potentially affected by CVE-2026-69190 via org.graylog2:graylog2-server (>=6.3.0, <=6.3.13)

org.graylog2:graylog2-server MAVEN version =6.3.0, =6.3.0, =6.3.0, =6.3.13 Source cves: CVE-2026-69190 Source advisory: GHSA-M9C2-85GV-8XR5...

org.graylog.plugins:graylog-plugin-parent (>=7.1.1, <=7.1.3), org.graylog.plugins:graylog-plugin-web-parent (>=7.1.1, <=7.1.3) potentially affected by CVE-2026-69190 via org.graylog2:graylog2-server (>=7.1.1, <=7.1.3)

org.graylog2:graylog2-server MAVEN version =7.1.1, =7.1.1, =7.1.1, =7.1.3 Source cves: CVE-2026-69190 Source advisory: OSV:GHSA-M9C2-85GV-8XR5...

org.graylog.plugins:graylog-plugin-parent (>=7.1.1, <=7.1.3), org.graylog.plugins:graylog-plugin-web-parent (>=7.1.1, <=7.1.3) potentially affected by CVE-2026-69190 via org.graylog2:graylog2-server (>=7.1.1, <=7.1.3)

org.graylog2:graylog2-server MAVEN version =7.1.1, =7.1.1, =7.1.1, =7.1.3 Source cves: CVE-2026-69190 Source advisory: SNYK:JAVA-ORGGRAYLOG2-20079479...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.3.0) +3 more potentially affected by CVE-2026-69190 via org.graylog2:graylog2-server (>=6.3.0, <=6.3.13)

org.graylog2:graylog2-server MAVEN version =6.3.0, =6.3.0, =6.3.0, =6.3.13 Source cves: CVE-2026-69190 Source advisory: SNYK:JAVA-ORGGRAYLOG2-20079479...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-69190 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.8)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.8 Source cves: CVE-2026-69190 Source advisory: OSV:GHSA-M9C2-85GV-8XR5...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-69190 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.8)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.8 Source cves: CVE-2026-69190 Source advisory: GHSA-M9C2-85GV-8XR5...

org.graylog.plugins:graylog-plugin-parent (>=7.1.1, <=7.1.3), org.graylog.plugins:graylog-plugin-web-parent (>=7.1.1, <=7.1.3) potentially affected by CVE-2026-69190 via org.graylog2:graylog2-server (>=7.1.1, <=7.1.3)

org.graylog2:graylog2-server MAVEN version =7.1.1, =7.1.1, =7.1.1, =7.1.3 Source cves: CVE-2026-69190 Source advisory: GHSA-M9C2-85GV-8XR5...

Missing Authorization

Overview org.graylog2:graylog2-server is a log management platform. Affected versions of this package are vulnerable to Missing Authorization through the update flow in ViewsResource for saved searches and dashboards. An attacker can gain owner-level control over a view by sending an update reque...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-69190 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.8)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.8 Source cves: CVE-2026-69190 Source advisory: SNYK:JAVA-ORGGRAYLOG2-20079479...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-69190 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.8)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.8 Source cves: CVE-2026-69190 Source advisory: MEND:CVE-2026-69190...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.3.0) +3 more potentially affected by CVE-2026-69190 via org.graylog2:graylog2-server (>=6.3.0, <=6.3.13)

org.graylog2:graylog2-server MAVEN version =6.3.0, =6.3.0, =6.3.0, =6.3.13 Source cves: CVE-2026-69190 Source advisory: MEND:CVE-2026-69190...

org.graylog.plugins:graylog-plugin-parent (>=7.1.1, <=7.1.3), org.graylog.plugins:graylog-plugin-web-parent (>=7.1.1, <=7.1.3) potentially affected by CVE-2026-69190 via org.graylog2:graylog2-server (>=7.1.1, <=7.1.3)

org.graylog2:graylog2-server MAVEN version =7.1.1, =7.1.1, =7.1.1, =7.1.3 Source cves: CVE-2026-69190 Source advisory: MEND:CVE-2026-69190...

Server-side Request Forgery (SSRF)

Overview org.graylog2:graylog2-server is a log management platform. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the outbound URL handling in HTTPJSONPathDataAdapter in...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.3.0) +3 more potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (>=6.2.0, <=6.3.11)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.3.11 Source cves: CVE-2026-55867 Source advisory: SNYK:JAVA-ORGGRAYLOG2-19456649...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.6)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.6 Source cves: CVE-2026-55867 Source advisory: OSV:GHSA-J769-9GV9-65GR...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.6)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.6 Source cves: CVE-2026-55867 Source advisory: SNYK:JAVA-ORGGRAYLOG2-19456649...