https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:33:41.464846+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-373300 EUVD-2026-373300 2026-10-06T02:33:41.492096+00:00 EUVD-2026-373300 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61548 fkie_cve-2026-61548 2026-10-06T02:33:41.492139+00:00

Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSD_PARAM function in plugins/mmpstrucdata/mmpstrucdata.c stores RFC5424 parameter values in a fixed pVal[32 * 1024] stack buffer and calls parsePARAM_VALUE without supplying the destination size. A remote unauthenticated attacker whose crafted RFC5424 message reaches an action using mmpstrucdata can provide a structured-data parameter larger than that buffer when MaxMessageSize permits it, causing an attacker-controlled stack overwrite. Deployments that do not install and use the plugin, or whose effective message-size limit remains below the required threshold, are not affected by this issue. The demonstrated impact is a crash and interruption of log collection; code execution is not demonstrated. This issue is fixed in version 8.2606.0.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-61548 msrc_CVE-2026-61548 — Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data 2026-10-06T02:33:41.492178+00:00 msrc_CVE-2026-61548 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11407-1 openSUSE-SU-2026:11407-1 — rsyslog-8.2606.0-1.1 on GA media 2026-10-06T02:33:41.492197+00:00

rsyslog-8.2606.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:23122-1 SUSE-SU-2026:23122-1 — Security update for rsyslog 2026-10-06T02:33:41.492214+00:00

Security update for rsyslog

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-61548 UBUNTU-CVE-2026-61548 2026-10-06T02:33:41.492229+00:00

Affected: Ubuntu:14.04:LTS: rsyslog, Ubuntu:Pro:16.04:LTS: rsyslog, Ubuntu:Pro:18.04:LTS: rsyslog, Ubuntu:Pro:20.04:LTS: rsyslog, Ubuntu:22.04:LTS: rsyslog, Ubuntu:24.04:LTS: rsyslog, Ubuntu:26.04:LTS: rsyslog

Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSD_PARAM function in plugins/mmpstrucdata/mmpstrucdata.c stores RFC5424 parameter values in a fixed pVal[32 * 1024] stack buffer and calls parsePARAM_VALUE without supplying the destination size. A remote unauthenticated attacker whose crafted RFC5424 message reaches an action using mmpstrucdata can provide a structured-data parameter larger than that buffer when MaxMessageSize permits it, causing an attacker-controlled stack overwrite. Deployments that do not install and use the plugin, or whose effective message-size limit remains below the required threshold, are not affected by this issue. The demonstrated impact is a crash and interruption of log collection; code execution is not demonstrated. This issue is fixed in version 8.2606.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2421 WID-SEC-W-2026-2421 — rsyslog: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung 2026-10-06T02:33:41.492264+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in rsyslog ausnutzen, um einen Denial of Service Angriff durchzuführen, und potenziell um beliebigen Programmcode auszuführen.