https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1441.htmlhttps://patchthecve.com/cve/CVE-2026-1441.htmlWed, 17 Jun 2026 10:15:47 +0000MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker thttps://patchthecve.com/cve/CVE-2026-1440.htmlhttps://patchthecve.com/cve/CVE-2026-1440.htmlWed, 17 Jun 2026 10:15:47 +0000MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker thttps://patchthecve.com/cve/CVE-2026-1439.htmlhttps://patchthecve.com/cve/CVE-2026-1439.htmlWed, 17 Jun 2026 10:15:47 +0000MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker thttps://patchthecve.com/cve/CVE-2026-1438.htmlhttps://patchthecve.com/cve/CVE-2026-1438.htmlWed, 17 Jun 2026 10:15:47 +0000MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker thttps://patchthecve.com/cve/CVE-2026-1437.htmlhttps://patchthecve.com/cve/CVE-2026-1437.htmlWed, 17 Jun 2026 10:15:47 +0000MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker thttps://patchthecve.com/cve/CVE-2026-1436.htmlhttps://patchthecve.com/cve/CVE-2026-1436.htmlWed, 17 Jun 2026 10:15:47 +0000MEDIUM 6.5: Improper Access Control (IDOR) in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user's profiles without proper authorization checks. Exploiting this vulnerability allows valid users of the system to be listed and sensitive https://patchthecve.com/cve/CVE-2026-1435.htmlhttps://patchthecve.com/cve/CVE-2026-1435.htmlWed, 17 Jun 2026 10:15:46 +0000CRITICAL 9.8: Not properly invalidated session vulnerability in Graylog Web Interface, version 2.2.3, due to incorrect management of session invalidation after new logins. The application generates a new 'sessionId' each time a user authenticates, but does not invalidate previously issued session identifiers, whihttps://patchthecve.com/cve/CVE-2025-53106.htmlhttps://patchthecve.com/cve/CVE-2025-53106.htmlWed, 17 Jun 2026 09:37:38 +0000HIGH 8.8: Graylog is a free and open log management platform. In versions 6.2.0 to before 6.2.4 and 6.3.0-alpha.1 to before 6.3.0-rc.2, Graylog users can gain elevated privileges by creating and using API tokens for the local Administrator or any other user for whom the malicious user knows the ID. For the athttps://patchthecve.com/cve/CVE-2025-46827.htmlhttps://patchthecve.com/cve/CVE-2025-46827.htmlWed, 17 Jun 2026 09:27:00 +0000HIGH 8.0: Graylog is a free and open log management platform. Prior to versions 6.0.14, 6.1.10, and 6.2.0, it is possible to obtain user session cookies by submitting an HTML form as part of an Event Definition Remediation Step field. For this attack to succeed, the attacker needs a user account with permissihttps://patchthecve.com/cve/CVE-2025-30373.htmlhttps://patchthecve.com/cve/CVE-2025-30373.htmlWed, 17 Jun 2026 09:08:36 +0000MEDIUM 6.5: Graylog is a free and open log management platform. Starting with 6.1, HTTP Inputs can be configured to check if a specified header is present and has a specified value to authenticate HTTP-based ingestion. Unfortunately, even though in cases of a missing header or a wrong value the correct HTTP reshttps://patchthecve.com/cve/CVE-2024-52506.htmlhttps://patchthecve.com/cve/CVE-2024-52506.htmlWed, 17 Jun 2026 08:07:21 +0000MEDIUM 6.5: Graylog is a free and open log management platform. The reporting functionality in Graylog allows the creation and scheduling of reports which contain dashboard widgets displaying individual log messages or metrics aggregated from fields of multiple log messages. This functionality, as included in G