Graylog

Security Risk Profile

/100

medium

Security Risk Score

Comprehensive risk assessment based on 64 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from February 17, 2015 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

6.8

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

40/100

medium

🆕 2Fresh (<7d)📈 4 in Last 30 Days

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

XSS

SSRF

Infoleak

Path Traversal

Input Validation

Most Affected Products

1. Graylog Graylog79

2. maven/org.graylog2:graylog2-server20

3. Graylog Graylog Web Interface7

4. Graylog graylog2-server1

5. Graylog Graylog Server1

Recent Vulnerabilities

See more →

CVE-2026-69190

CVSS 6.3medium

Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

Sep 21, 2026🔧 No Patch

CVE-2026-92789

CVSS 7.1EPSS 0%high

Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirect

Sep 16, 2026🔧 No Patch

CVE-2026-55867

CVSS 5.3medium

Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens

Aug 28, 2026

CVE-2026-55841

CVSS 7.5high

Graylog: Fortigate syslog message parser can be exploited to modify or delete fields from the original message