com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.0.0, <=6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=6.0.0, <=6.3.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (>=6.0.0, <=6.3.11)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.3.11 Source cves: CVE-2026-55841 Source advisory: OSV:GHSA-GQR6-R77P-C2PJ...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=5.1.0, <=5.1.3), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=5.1.0, <=5.1.1) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (5.1.3)

org.graylog2:graylog2-server MAVEN version 5.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard =5.1.0, =5.1.0, =5.1.0, =5.1.2 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.6)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.6 Source cves: CVE-2026-55841 Source advisory: GHSA-GQR6-R77P-C2PJ...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.0.0, <=6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=6.0.0, <=6.3.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (>=6.0.0, <=6.3.11)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.3.11 Source cves: CVE-2026-55841 Source advisory: GHSA-GQR6-R77P-C2PJ...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.6)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.6 Source cves: CVE-2026-55841 Source advisory: SNYK:JAVA-ORGGRAYLOG2-19457545...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.1.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.1.0, <=4.3.1) +4 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (4.2.3)

org.graylog2:graylog2-server MAVEN version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.1...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.0.0, <=6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=6.0.0, <=6.3.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (>=6.0.0, <=6.3.11)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.3.11 Source cves: CVE-2026-55841 Source advisory: SNYK:JAVA-ORGGRAYLOG2-19457545...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (5.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (5.0.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (5.0.8)

org.graylog2:graylog2-server MAVEN version 5.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 5.0.0 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +4 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.4.3)

org.graylog2:graylog2-server MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 1.0.0 -...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=2.0.0, <=2.2.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=3.2.0, <=3.2.5) +4 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (3.2.5)

org.graylog2:graylog2-server MAVEN version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =2.0.0, =3.2.0, =2.0.0, =2.0.2, =2.2...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (3.0.0), org.graylog.plugins:graylog-plugin-parent (3.0.1) +1 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (3.0.1)

org.graylog2:graylog2-server MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 3.0.0 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (5.2.1), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (5.1.3) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (5.1.9)

org.graylog2:graylog2-server MAVEN version 5.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 5.2.1 -...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.1.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=1.0.0, <=6.3.0) +12 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (>=1.0.0-beta.3, <=6.3.11)

org.graylog2:graylog2-server MAVEN version =1.0.0-beta.3, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.0.3, =1.0.0-beta.2, =1.2.0-rc.1, =1.3.4 Source cves: CVE-2026-55841 Source advisory: MEND:CVE-2026-55841...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.6)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.6 Source cves: CVE-2026-55841 Source advisory: MEND:CVE-2026-55841...

PT-2026-83183

Incorrect access control in the getWizardCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain setup wizard and onboarding configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-81728

Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST'updatekeys', 'array' in htdocs/imports/import.php, which applies only the generic alphanohtml filter: that strips HTML but leaves SQL keywords, comment markers,...

CVE-2026-81728 Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keys

Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST'updatekeys', 'array' in htdocs/imports/import.php, which applies only the generic alphanohtml filter: that strips HTML but leaves SQL keywords, comment markers,...

CVE-2026-81728

Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST'updatekeys', 'array' in htdocs/imports/import.php, which applies only the generic alphanohtml filter: that strips HTML but leaves SQL keywords, comment markers,...

CVE-2026-81728

Dolibarr before 24.0.0 is affected by a SQL injection in its CSV/XLSX import wizard. The updatekeys parameter in htdocs/imports/import.php is filtered only by alphanohtml, which strips HTML but leaves SQL metacharacters intact. In import_insert() (import_csv.modules.php), submitted values are con...

CVE-2026-81728 Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keys

Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST'updatekeys', 'array' in htdocs/imports/import.php, which applies only the generic alphanohtml filter: that strips HTML but leaves SQL keywords, comment markers,...