CVE-2026-65011

Graylog2 Server before commit 46a2eeb contains a missing per-entity permission check in the POST /events/definitions/definitionId/duplicate endpoint that allows authenticated users to clone any event definition. Attackers with the low-privilege eventdefinitions:create capability can read private...

CVE-2026-65011

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-65011 Graylog2 Server Missing Permission Check on Event Definition Duplicate

Graylog2 Server before commit 46a2eeb contains a missing per-entity permission check in the POST /events/definitions/definitionId/duplicate endpoint that allows authenticated users to clone any event definition. Attackers with the low-privilege eventdefinitions:create capability can read private...

CVE-2026-65011: Missing Authorization

Graylog2 Server before commit 46a2eeb contains a missing per-entity permission check in the POST /events/definitions/definitionId/duplicate endpoint that allows authenticated users to clone any event definition. Attackers with the low-privilege eventdefinitions:create capability can read private...

org.graylog.plugins:graylog-plugin-parent (>=6.2.0, <=6.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=6.2.0, <=6.2.3) potentially affected by CVE-2025-53106 via org.graylog2:graylog2-server (>=6.2.0, <=6.2.3)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.2.3 Source cves: CVE-2025-53106 Source advisory: SNYK:JAVA-ORGGRAYLOG2-10571076...

org.graylog.plugins:graylog-plugin-parent (>=6.2.0, <=6.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=6.2.0, <=6.2.3) potentially affected by CVE-2025-53106 via org.graylog2:graylog2-server (>=6.2.0, <=6.2.3)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.2.3 Source cves: CVE-2025-53106 Source advisory: GHSA-3M86-C9X3-VWM9...

org.graylog.plugins:graylog-plugin-parent (>=6.2.0, <=6.2.3), org.graylog.plugins:graylog-plugin-web-parent (>=6.2.0, <=6.2.3) potentially affected by CVE-2025-53106 via org.graylog2:graylog2-server (>=6.2.0, <=6.2.3)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.2.3 Source cves: CVE-2025-53106 Source advisory: OSV:GHSA-3M86-C9X3-VWM9...

Cross-site Scripting (XSS)

org.graylog2:graylog2-server is vulnerable to Cross-site Scripting XSS. The vulnerability is due to insecure input handling due to the ability to inject and submit malicious HTML forms via the Event Definition Remediation Step field, which can result in session cookie theft under specific...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-46827 Source advisory: SNYK:JAVA-ORGGRAYLOG2-10116752...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.0.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.0.0, <=6.0.13)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.13 Source cves: CVE-2025-46827 Source advisory: SNYK:JAVA-ORGGRAYLOG2-10116752...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.1.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=1.0.0, <=6.0.0) +12 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=1.0.0-beta.3, <=6.0.13)

org.graylog2:graylog2-server MAVEN version =1.0.0-beta.3, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.0.3, =1.0.0-beta.2, =1.2.0-rc.1, =1.3.4 Source cves: CVE-2025-46827 Source advisory: MEND:CVE-2025-46827...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-46827 Source advisory: MEND:CVE-2025-46827...

org.graylog.plugins:graylog-plugin-parent (4.3.13), org.graylog.plugins:graylog-plugin-web-parent (4.3.13) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (4.3.13)

org.graylog2:graylog2-server MAVEN version 4.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.13 - org.graylog.plugins:graylog-plugin-web-parent 4.3.1...

org.graylog.plugins:graylog-plugin-parent (5.1.5), org.graylog.plugins:graylog-plugin-web-parent (5.1.5) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (5.1.5)

org.graylog2:graylog2-server MAVEN version 5.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.1.5 - org.graylog.plugins:graylog-plugin-web-parent 5.1.5...

com.github.exabrial:graylog-plugin-openwire (>=1.3.0, <=1.3.1), org.graylog.plugins:graylog-plugin-parent (3.1.4) +1 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (3.1.4)

org.graylog2:graylog2-server MAVEN version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.github.exabrial:graylog-plugin-openwire =1.3.0, =1.3.1 - org.graylog.plugins:graylog-plugin-parent...

org.graylog.telemetry:graylog-telemetry-plugin (1.0.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (1.0.0)

org.graylog2:graylog2-server MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.telemetry:graylog-telemetry-plugin 1.0.1 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (>=1.0.3, <=1.0.4) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (1.1.0-beta.3)

org.graylog2:graylog2-server MAVEN version 1.1.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics =1.0.3, =1.0.4 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (1.0.5) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (1.1.0-rc.1)

org.graylog2:graylog2-server MAVEN version 1.1.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 1.0.5 Source cves: CVE-2025-46827 Source advisory:...

org.graylog2:graylog2-rest-routes (1.2.0-rc.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (1.2.0-rc.1)

org.graylog2:graylog2-server MAVEN version 1.2.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog2:graylog2-rest-routes 1.2.0-rc.1 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.4) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.1.0-beta.4)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.4 Source cves: CVE-2025-46827 Source advisory:...