CVE-2026-61548: rsyslog mmpstrucdata stack overflow
Published Jul 20, 2026
·Updated
Last updated 20 July 2026
Affected Software
2 affected componentsFixes available
rsyslog Rsyslog
debian/rsyslog<=8.2102.0-2+deb11u1, <=8.2302.0-1+deb12u1, <=8.2504.0-1
8.2606.0-4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/rsyslogto a version that resolves this vulnerability.Fixed in 8.2606.0-4
Event History
Jul 24, 2026
CVE Published
via Ubuntu·06:40 PM
Data Sourced
via Ubuntu·06:40 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·06:42 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-61548?
CVE-2026-61548 has a risk score of 60, indicating a moderate severity level.
2
How do I fix CVE-2026-61548?
To mitigate CVE-2026-61548, update to the latest version of rsyslog that addresses this stack overflow issue.
3
What software is affected by CVE-2026-61548?
CVE-2026-61548 affects the rsyslog software, specifically distributions using Debian/rsyslog.
4
What does CVE-2026-61548 describe?
CVE-2026-61548 describes a stack overflow vulnerability in rsyslog's mmpstrucdata component.
5
When was CVE-2026-61548 published?
CVE-2026-61548 was published on July 20, 2026.