GHSA-Q79R-R9XG-R863 Graylog Server: System Catalog titles endpoint can be used to retrieve values of protected database fields

Impact A vulnerability was found in Graylog's API endpoint for retrieving system catalog entity titles. Authenticated users could retrieve database fields of supported entities by sending a custom API request. These fields can include e.g. the password hash of a user but not the password itself,...

CVE-2026-55425 Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields

Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in graylog2-server/src/main/java/org/graylog2/rest/resources/system/contentpacks/titles/EntityTitleServiceImpl.java allows an authenticated user to request...

EUVD-2026-67856

Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in graylog2-server/src/main/java/org/graylog2/rest/resources/system/contentpacks/titles/EntityTitleServiceImpl.java allows an authenticated user to request...

CVE-2026-55425

Graylog (free and open log management platform) has an authorization flaw in the System Catalog entity titles endpoint (EntityTitleServiceImpl.java). An authenticated user can request composite display fields without the server verifying that every selected field is readable, allowing retrieval o...

CVE-2026-55425 Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields

Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in graylog2-server/src/main/java/org/graylog2/rest/resources/system/contentpacks/titles/EntityTitleServiceImpl.java allows an authenticated user to request...

LearningDigital Orca HCM digital learning platform 路径遍历漏洞

The LearningDigital Orca HCM digital learning platform is a digital learning platform from China-based LearningDigital. The Orca HCM digital learning platform suffers from a Path Traversal vulnerability that arises from the platform's directory page parameters not filtering special characters. A...

GaussDB Kernel: Disabling System Catalog Structure Modification

allowsystemtablemods allows for system catalog structure modification. This parameter collaborates with GaussDB Kernel to help recover a severely damaged database in some cases. You are advised not to use this parameter in production Databases. Copyright C 2020 Greenbone Networks GmbH Some text...

openGauss: Disabling System Catalog Structure Modification

allowsystemtablemods allows for system catalog structure modification. This parameter collaborates with openGauss to help recover a severely damaged database in some cases. You are advised not to use this parameter in production Databases. Copyright C 2020 Greenbone Networks GmbH Some text...

openGauss: Prohibiting New Connections to Database Templates

To prevent improper modification of the database template, you need to set the datallowconn field in the system catalog pgdatabase to false, prohibiting new connections to the database. If the database template template1 is set to deny user connections, database upgrade will be affected. If...