EUVD-2026-85607

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

CVE-2026-85475

The Ansible Automation Platform automation controller is vulnerable to an injection flaw in its external logging (rsyslog ) configuration. The system generates configuration files by interpolating user-controlled settings—specifically LOG_AGGREGATOR_HOST , LOG_AGGREGATOR_MAX_DISK_USAGE_PATH , and...

CVE-2026-85475 Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslog component

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

CVE-2026-85475 Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslog component

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

CVE-2026-85475

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

rsyslog security update

An update is available for rsyslog. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It...

RLSA-2026:69541 Important: rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: rsyslog: Denial of service via heap buffer overflow in...

CVE-2026-61548

A flaw was found in Rsyslog, a system for log processing. A remote unauthenticated attacker could exploit a stack buffer overflow vulnerability within the optional mmpstrucdata plugin. By sending a specially crafted RFC5424 message containing an oversized structured-data parameter, the attacker c...

CVE-2026-55556

A flaw was found in Rsyslog, a system for log processing, specifically in its optional imhttp module. An attacker can remotely trigger a heap buffer overflow by sending a specially crafted, oversized credential to an imhttp endpoint configured for Basic Authentication. This can lead to a system...

PT-2026-105464

Stack-based Buffer Overflow in mmpstrucdata rsyslog plugin...

CVE-2026-85475: Improper Neutralization of Directives in Statically Saved Code

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

PT-2026-97551

Name of the Vulnerable Software and Affected Versions Ansible Automation Platform automation controller affected versions not specified Description An issue exists where the external logging configuration for rsyslog is generated by interpolating user-controlled settings into an rsyslog...

UBUNTU-CVE-2026-93403

Stack-based Buffer Overflow in mmpstrucdata rsyslog plugin...

Linux Distros Unpatched Vulnerability : CVE-2026-92709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - rsyslog - None Ubuntu Linux - Unknown description CVE-2026-92709 Note that Nessus relies on the presence of the package as reported by the vendor...

CVE-2026-93403

Stack-based Buffer Overflow in mmpstrucdata rsyslog plugin...

Linux Distros Unpatched Vulnerability : CVE-2026-93403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - rsyslog - None Ubuntu Linux - Stack-based Buffer Overflow in mmpstrucdata rsyslog plugin CVE-2026-93403 Note that Nessus relies on the presence o...

MiracleLinux 9 : rsyslog-8.2510.0-2.el9_8.2 (AXSA:2026-1896:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1896:03 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description...

RockyLinux 10 : rsyslog (RLSA-2026:69541)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:69541 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description blo...

Oracle Linux 9 : rsyslog (ELSA-2026-69540)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69540 advisory. - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace function Resolves: RHEL-246641 Tenable has extracted the preceding description block directl...

Linux Distros Unpatched Vulnerability : CVE-2026-93402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - rsyslog - None Ubuntu Linux - mdtls discards the peer-identity verification result CVE-2026-93402 Note that Nessus relies on the presence of the...