Skip to content
OpenAdvisories

Product · Graylog

Graylog Web Interface

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-1436

    Improper Access Control (IDOR) vulnerability in Graylog Web Interface

    Improper Access Control (IDOR) in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user's profiles without proper authorization checks. Exploiting this vulnerability allows valid users …

    Graylog Graylog Web Interface