org.graylog.plugins:usage-statistics (2.1.0-beta.3) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.1.0-beta.3)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.3 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-rc.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.1.0-rc.1)

org.graylog2:graylog2-server MAVEN version 2.1.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-rc.1 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.1), org.graylog.plugins:usage-statistics (2.1.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.1.1)

org.graylog2:graylog2-server MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.1 - org.graylog.plugins:usage-statistics 2.1....

org.graylog.plugins:usage-statistics (1.0.5) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (1.1.0-rc.1)

org.graylog2:graylog2-server MAVEN version 1.1.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 1.0.5 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (>=1.0.7, <=1.1.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (1.1.0)

org.graylog2:graylog2-server MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics =1.0.7, =1.1.1 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-alpha.2) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.0.0-alpha.2)

org.graylog2:graylog2-server MAVEN version 2.0.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-alpha.2 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-alpha.4) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.0.0-alpha.4)

org.graylog2:graylog2-server MAVEN version 2.0.0-alpha.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-alpha.4 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-beta.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.0.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-beta.1 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-rc.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.0.0-rc.1)

org.graylog2:graylog2-server MAVEN version 2.0.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-rc.1 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.0.0)

org.graylog2:graylog2-server MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.3) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.0.3)

org.graylog2:graylog2-server MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.3 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.4) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.1.0-beta.4)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.4 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.3) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.1.3)

org.graylog2:graylog2-server MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.3 Source cves: CVE-2026-55841 Source advisory:...

org.graylog.plugins:usage-statistics (1.2.2), org.graylog2:graylog2-rest-routes (1.3.3) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (1.3.3)

org.graylog2:graylog2-server MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 1.2.2 - org.graylog2:graylog2-rest-routes 1.3.3 Source cves:...

CVE-2026-52681

Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script. Compiled script files are also not removed when a script is deleted or renamed. The configured Sieve CPU limit can be bypassed,...

CVE-2026-52681

Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script. Compiled script files are also not removed when a script is deleted or renamed. The configured Sieve CPU limit can be bypassed,...

CVE-2026-42391

An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by...

CVE-2026-40017

An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal hash table, which makes the IMAP THREAD command consume CPU disproportionate to the size of the message. This is a separate issue from CVE-2026-40014 and is not addressed by that...

CVE-2026-40014

An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disproportionate to the size of the message. When a mail client issues a THREAD command on the affected mailbox, this can cause degradation or denial of service for IMAP. Monitor...

CVE-2026-27852: Uncontrolled Resource Consumption

An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit...