PatchTheCVEgraylog vulnerabilities and fixes
Recent CVEs affecting graylog, with upgrade or downgrade steps. 11 tracked.
graylog has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-02-18. Highest priority: CVE-2026-1435 (score 48/100).
- CVE-2026-1441 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused
- CVE-2026-1440 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused
- CVE-2026-1439 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused
- CVE-2026-1438 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused
- CVE-2026-1437 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused
- CVE-2026-1436 MEDIUM 6.5 DOWNGRADE Improper Access Control (IDOR) in the Graylog API, version 2.2.3, which occurs when modifying the user ID in t
- CVE-2026-1435 CRITICAL 9.8 DOWNGRADE Not properly invalidated session vulnerability in Graylog Web Interface, version 2.2.3, due to incorrect manag
- CVE-2025-53106 HIGH 8.8 UPGRADE Graylog is a free and open log management platform
- CVE-2025-46827 HIGH 8.0 UPGRADE Graylog is a free and open log management platform
- CVE-2025-30373 MEDIUM 6.5 UPGRADE Graylog is a free and open log management platform
- CVE-2024-52506 MEDIUM 6.5 UPGRADE Graylog is a free and open log management platform
FAQ
How do I fix graylog vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is graylog being exploited right now?
None of the tracked graylog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which graylog CVE should I patch first?
CVE-2026-1435 currently ranks highest (48/100): Not properly invalidated session vulnerability in Graylog Web Interface, version 2.2.3, due to incorrect manag.