com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.3.0) +3 more potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (>=6.2.0, <=6.3.11)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.3.11 Source cves: CVE-2026-55867 Source advisory: OSV:GHSA-J769-9GV9-65GR...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.6)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.6 Source cves: CVE-2026-55867 Source advisory: GHSA-J769-9GV9-65GR...

org.graylog.plugins:graylog-plugin-parent (7.1.1), org.graylog.plugins:graylog-plugin-web-parent (7.1.1) potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (7.1.1)

org.graylog2:graylog2-server MAVEN version 7.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 7.1.1 - org.graylog.plugins:graylog-plugin-web-parent 7.1.1...

org.graylog.plugins:graylog-plugin-parent (7.1.1), org.graylog.plugins:graylog-plugin-web-parent (7.1.1) potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (7.1.1)

org.graylog2:graylog2-server MAVEN version 7.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 7.1.1 - org.graylog.plugins:graylog-plugin-web-parent 7.1.1...

org.graylog.plugins:graylog-plugin-parent (7.1.1), org.graylog.plugins:graylog-plugin-web-parent (7.1.1) potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (7.1.1)

org.graylog2:graylog2-server MAVEN version 7.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 7.1.1 - org.graylog.plugins:graylog-plugin-web-parent 7.1.1...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.3.0) +3 more potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (>=6.2.0, <=6.3.11)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.3.11 Source cves: CVE-2026-55867 Source advisory: GHSA-J769-9GV9-65GR...

Authorization Bypass Through User-Controlled Key

Overview org.graylog2:graylog2-server is a log management platform. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the token revocation endpoint, which deletes an access token by its identifier without verifying that the token belongs to th...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.3.0) +3 more potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (>=6.2.0, <=6.3.11)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.3.11 Source cves: CVE-2026-55867 Source advisory: MEND:CVE-2026-55867...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.6)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.6 Source cves: CVE-2026-55867 Source advisory: MEND:CVE-2026-55867...

org.graylog.plugins:graylog-plugin-parent (7.1.1), org.graylog.plugins:graylog-plugin-web-parent (7.1.1) potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (7.1.1)

org.graylog2:graylog2-server MAVEN version 7.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 7.1.1 - org.graylog.plugins:graylog-plugin-web-parent 7.1.1...

com.github.exabrial:graylog-plugin-openwire (>=1.0.0, <=1.2.0), de.hilling.graylog:graylog-plugin-function-multimatch (1.0.1) +4 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.4.6)

org.graylog2:graylog2-server MAVEN version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.github.exabrial:graylog-plugin-openwire =1.0.0, =1.2.0 -...

org.graylog.plugins:graylog-plugin-parent (4.1.11), org.graylog.plugins:graylog-plugin-web-parent (4.1.11) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (4.1.11)

org.graylog2:graylog2-server MAVEN version 4.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.1.11 - org.graylog.plugins:graylog-plugin-web-parent 4.1.1...

org.graylog.plugins:graylog-plugin-parent (5.2.12), org.graylog.plugins:graylog-plugin-web-parent (5.2.12) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (5.2.12)

org.graylog2:graylog2-server MAVEN version 5.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.12 - org.graylog.plugins:graylog-plugin-web-parent 5.2.1...

org.graylog.plugins:graylog-plugin-parent (4.2.2), org.graylog.plugins:graylog-plugin-web-parent (4.2.2) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (4.2.2)

org.graylog2:graylog2-server MAVEN version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.2.2 - org.graylog.plugins:graylog-plugin-web-parent 4.2.2...

org.graylog.telemetry:graylog-telemetry-plugin (1.0.0) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (1.0.0-rc.4)

org.graylog2:graylog2-server MAVEN version 1.0.0-rc.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.telemetry:graylog-telemetry-plugin 1.0.0 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (1.0.5) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (1.1.0-rc.1)

org.graylog2:graylog2-server MAVEN version 1.1.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 1.0.5 Source cves: CVE-2026-55841 Source advisory:...

org.graylog2:graylog2-rest-routes (1.2.0-rc.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (1.2.0-rc.1)

org.graylog2:graylog2-server MAVEN version 1.2.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog2:graylog2-rest-routes 1.2.0-rc.1 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.telemetry:graylog-telemetry-plugin (1.0.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (1.0.0)

org.graylog2:graylog2-server MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.telemetry:graylog-telemetry-plugin 1.0.1 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (>=1.0.3, <=1.0.4) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (1.1.0-beta.3)

org.graylog2:graylog2-server MAVEN version 1.1.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics =1.0.3, =1.0.4 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (>=1.0.7, <=1.1.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (1.1.0)

org.graylog2:graylog2-server MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics =1.0.7, =1.1.1 Source cves: CVE-2026-55841 Source advisory:...