Graylog2 vulnerabilities
We track 3 vulnerabilities in Graylog2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 28, 2026.
Latest Graylog2 vulnerabilities
- 7.5 High severity
graylog2-server: Improper Neutralization of Special Elements
Graylog is a free and open log management platform. Prior to Graylog Server versions 6.3.12, 7.0.7, and 7.1.2 and Graylog Forwarder version 7.3, the FortiGate key-value syslog parser in graylog2-server/src/main/java/org/graylog2/inputs/codecs/GLFortiGateSyslog
- 8.8 High severity
graylog2-server: Improper Authorization
Graylog is a free and open log management platform. In versions 6.2.0 to before 6.2.4 and 6.3.0-alpha.1 to before 6.3.0-rc.2, Graylog users can gain elevated privileges by creating and using API tokens for the local Administrator or any other user for whom the
- 8.8 High severity
graylog2-server: Incorrect Authorization
Graylog is a free and open log management platform. Starting in version 2.0.0 and prior to versions 5.1.11 and 5.2.4, arbitrary classes can be loaded and instantiated using a HTTP PUT request to the `/api/system/cluster_config/` endpoint. Graylog's cluster con