rhel9/rsyslog vulnerabilities

CVEs whose affected-version data names the rhel9/rsyslog package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-78002High· 7.5

4w ago

A flaw was found in rsyslog

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer …

▾ TwilightRed Hat · rsyslogEPSS 0.66%via NVD