CVE-2026-55556

A flaw was found in Rsyslog, a system for log processing, specifically in its optional imhttp module. An attacker can remotely trigger a heap buffer overflow by sending a specially crafted, oversized credential to an imhttp endpoint configured for Basic Authentication. This can lead to a system...