G
Vendor security profile
Graylog2
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS6.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
3
2
0
CVE KEV
CVE severity distribution
5toplam CVE
High2 (40%)
Medium3 (60%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
6.3
CVE-2026-69190
Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards
G
Patch status unknownEPSS %0
7.1
CVE-2026-92789
Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirect
G
Patch status unknownEPSS %0
5.3
CVE-2026-55867
Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens
G
Patch status unknownEPSS %1
7.5
CVE-2026-55841
Graylog: Fortigate syslog message parser can be exploited to modify or delete fields from the original message
G
Patch status unknownEPSS %1
5.0
CVE-2026-55425
Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields
G
Patch status unknownEPSS %0