Rocky Linux 10.2 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc (crlsa-2026_69541)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202669541 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description blo...

Rocky Linux 9.6 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc Multiple Vulnerabilities (ciqsa-2026_1504)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261504 advisory. This advisory aggregates security fixes for the rsyslog SRPM in CIQ LTS 9.6. It addresses 4 CVEs: CVE-2022-24903, CVE-2011-3200, CVE-2014-3634,...

Rocky Linux 9.6 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.6:CLSA-2026:1788424971)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788424971 advisory. - A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

Rocky Linux 9.6 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ciqsa-2026_1528)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261528 advisory. This advisory aggregates security fixes for the rsyslog SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-19654. Tenable has extracted the preceding description...

AlmaLinux 9.2 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.2:CLSA-2026:1790809774)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790809774 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

CentOS Linux 8.4 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (CENTOS8.4:CLSA-2026:1787819520)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1787819520 advisory. - A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

Rocky Linux 9.6 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.6:CLSA-2026:1790795134)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790795134 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function b...

AlmaLinux 9.6 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.6:CLSA-2026:1790795134)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790795134 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

CVE-2026-93402

A flaw was found in rsyslog. When using the imdtls input module configured for name or fingerprint authentication, permitted-peer identity checks are not enforced after a successful DTLS handshake. A remote attacker possessing a valid certificate signed by the listener's trusted Certificate...

Exploit for Path Traversal in Vmware Vcenter_Server

CVE-2026-59310 – VMware vCenter Syslog Directory Traversal Lea...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : rsyslog vulnerability (USN-8786-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8786-1 advisory. It was discovered that rsyslog incorrectly calculated buffer sizes when replacing strings. A remote...

RLSA-2026:69540 Important: rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: rsyslog: Denial of service via heap buffer overflow in...

rsyslog security update

An update is available for rsyslog. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It...

RockyLinux 9 : rsyslog (RLSA-2026:69540)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:69540 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description bloc...

CVE-2026-85475

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

EUVD-2026-85607

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

CVE-2026-85475

The Ansible Automation Platform automation controller is vulnerable to an injection flaw in its external logging (rsyslog ) configuration. The system generates configuration files by interpolating user-controlled settings—specifically LOG_AGGREGATOR_HOST , LOG_AGGREGATOR_MAX_DISK_USAGE_PATH , and...

CVE-2026-85475 Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslog component

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

CVE-2026-85475 Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslog component

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

CVE-2026-85475

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...