Lucene search
+L

36 matches found

osv_ubuntu
osv_ubuntu
•added 2026/10/22 2:17 p.m.•22 views

UBUNTU-CVE-2026-92709

Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file...

8.1CVSS5.9AI score0.00375EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/10/22 1:32 p.m.•18 views

CVE-2026-92709

Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file...

8.1CVSS5.9AI score0.00375EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/10/22 1:32 p.m.•91 views

CVE-2026-92709 Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE

Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file...

8.1CVSS0.00375EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/22 1:32 p.m.•16 views

EUVD-2026-108168

Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file...

8.1CVSS5.9AI score0.00375EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/22 1:32 p.m.•9 views

CVE-2026-92709 Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE

Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file...

8.1CVSS5.9AI score0.00375EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/10/22 1:32 p.m.•17 views

CVE-2026-92709 Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE

Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file...

8.1CVSS5.9AI score
SaveExploits0References3
CVE
CVE
•added 2026/10/22 1:32 p.m.•112 views

CVE-2026-92709

The rsyslog log processing system (versions 1.15.0 to 8.2610.0 ) is vulnerable to a path traversal flaw within the omfile dynaFile facility. The issue arises when a dynaFile template uses untrusted input as a path component without explicit secure-path handling, allowing an attacker to escape the...

8.1CVSS5.9AI score0.00375EPSS
SaveExploits0References1
Mend
Mend
•added 2026/10/22 1:32 p.m.•6 views

CVE-2026-92709

Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file...

9.2CVSS5.9AI score0.00375EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/22 12:00 a.m.•10 views

PT-2026-134933

Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file...

8.1CVSS6AI score0.00375EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/22 12:00 a.m.•17 views

Amazon Linux AMI 2: CVE-2026-92709: Security patch for rsyslog (ALAS-2026-3967)

Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file...

8.1CVSS6AI score0.00375EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/10/21 4:00 p.m.•16 views

Rsyslog path traversal vulnerability

A security vulnerability exists in Rsyslog versions 1.15.0 through 8.2610.0. This vulnerability arises because the omfile dynaFile template uses values affected by untrusted input as path components without performing explicit safe path handling. As a result, rendered paths may exceed expected lo...

8.1CVSS5.9AI score0.00375EPSS
SaveExploits0References1
Amazon
Amazon
•added 2026/10/12 12:00 a.m.•14 views

Important: rsyslog

Issue Overview: rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file names. A deployment becomes unsafe when a dynaFile template uses a valu...

6.1AI score0.00375EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/10/12 12:00 a.m.•16 views

Amazon Linux 2023 : rsyslog, rsyslog-crypto, rsyslog-elasticsearch (ALAS2023-2026-3157)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3157 advisory. rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically...

8.1CVSS6.1AI score0.00375EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/10/12 12:00 a.m.•20 views

Amazon Linux 2 : rsyslog (ALAS-2026-3967)

The version of rsyslog installed on the remote host is prior to 8.24.0-57. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3967 advisory. rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid...

8.1CVSS6.1AI score0.00375EPSS
SaveExploits0References4
Amazon
Amazon
•added 2026/10/12 12:00 a.m.•13 views

Important: rsyslog

Issue Overview: rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file names. A deployment becomes unsafe when a dynaFile template uses a valu...

6.2AI score0.00375EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•22 views

PT-2026-105462

Name of the Vulnerable Software and Affected Versions rsyslog versions 1.15.0 through 8.2610.0 Description The omfile dynaFile facility allows templates to generate flexible output paths for routing logs into different directories or using dynamic file names. A security issue occurs when a dynaFi...

8.1CVSS5.9AI score0.00375EPSS
SaveExploits0References33
Rows per page
Query Builder