graylog2-server

Graylog 欢迎！ Graylog 是一个免费且开源的日志管理平台。 您可以通过我们的网站了解更多项目信息，并在文档站点查阅文档。 问题跟踪 发现 Bug？有改进想法？欢迎随时提交问题。 参与贡献 帮助我们构建日志管理的未来，成为这个每天被成千上万人使用的项目的一员。 请遵循贡献者指南并阅读贡献说明以开始。 想通过开发我们免费开放的产品获得报酬吗？欢迎申请我们的职位！ 保持联系 欢迎在 freenode IRC 的 graylog 频道、libera 的 graylog 频道与我们聊天，或在我们的社区讨论论坛创建话题。 许可证 Graylog 根据 Server Side Publi...

ad-honeypot-autodeploy

ad-honeypot-autodeploy 意図的に安全でない脆弱なWindowsドメインをRDPハニーポットのために完全自動でデプロイします。 セルフホストの仮想化（libvirt + QEMU/KVM）上で動作します（クラウドベースのソリューション向けに簡単にカスタマイズ可能です）。 RDPハニーポットテストを目的として、小規模なWindowsドメインを自動的に（ユーザー操作なしで）手間なくセットアップするために使用します。 ドメインコントローラ、デスクトップコンピュータ、そして悪意ある者の行動をログに記録する設定済みのGraylogサーバを備えています。 自動デプロイフェーズ 1...

ad-honeypot-autodeploy

ad-honeypot-autodeploy Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically. Runs on self-hosted virtualization using libvirt with QEMU/KVM but it can be customized easily for cloud-based solutions. Used for painlessly set up a small Windows Domai...

graylog-cve-2024-24824-exploit

JVMにおける任意のクラスローディングの悪用 このリポジトリは、私の講演で紹介した概念実証のエクスプロイトを含んでいます。 JVMにおける任意のクラスローディングの悪用 興味があればこちらでご覧ください: Youtube このエクスプロイトは CVE-2024-24824 スライドに軽微なタイポがあります をターゲットにしており、Graylog のバージョン 2.0.0 から 5.2.3 に影響を与える任意のクラスローディングの脆弱性です。...

EUVD-2026-84038

Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards...

Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

Impact A vulnerability was found in Graylog's API endpoint for updating saved searches and dashboards. A user with edit permissions on a dashboard or saved search could grant owner permissions to an arbitrary account, which could then be used to delete the respective saved search or dashboard or ...

GHSA-M9C2-85GV-8XR5 Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

Impact A vulnerability was found in Graylog's API endpoint for updating saved searches and dashboards. A user with edit permissions on a dashboard or saved search could grant owner permissions to an arbitrary account, which could then be used to delete the respective saved search or dashboard or ...

CVE-2026-69190

Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary account. Th...

CVE-2026-69190 Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary account. Th...

CVE-2026-69190 Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary account. Th...

CVE-2026-69190

Graylog is an open-source log management platform. In versions 6.3.0 through 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary acc...

CVE-2026-69190 Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary account. Th...

PT-2026-96190

Name of the Vulnerable Software and Affected Versions Graylog versions 6.3.0 through 6.3.13 Graylog versions 7.0.x prior to 7.0.9 Graylog versions 7.1.x prior to 7.1.4 Description The view update API for saved searches and dashboards allows a user with edit permissions, who is not the entity owne...

CVE-2026-69190: Authorization Bypass Through User-Controlled Key

Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary account. Th...

CVE-2026-92789

Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects. Attackers with lookup table or event notification permissions can craft allowlisted endpoints that redirect to internal services, enabling the server ...

CVE-2026-92789

Graylog versions through 7.1.4 are vulnerable to Server-Side Request Forgery (SSRF) via HTTP redirects. The root cause is that Graylog validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects . An attacker with lookup table or eve...

CVE-2026-92789 Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirect

Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects. Attackers with lookup table or event notification permissions can craft allowlisted endpoints that redirect to internal services, enabling the server ...

EUVD-2026-81052

Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects. Attackers with lookup table or event notification permissions can craft allowlisted endpoints that redirect to internal services, enabling the server ...

CVE-2026-92789 Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirect

Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects. Attackers with lookup table or event notification permissions can craft allowlisted endpoints that redirect to internal services, enabling the server ...

CVE-2026-92789 Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirect

Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects. Attackers with lookup table or event notification permissions can craft allowlisted endpoints that redirect to internal services, enabling the server ...