Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/20 4:57 p.m.9 views

CVE-2026-39879 SQL injection in syslog-ng SQL destionation driver

Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...

7.1CVSS5.6AI score
SaveExploits0References3
Rows per page
Query Builder