Skip to content
OpenAdvisories

Product · Graylog

Graylog Web Interface

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-1441

    Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

    Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applyin…

    Graylog Graylog Web Interface
  • Medium 5.3
    CVE-2026-1440

    Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

    Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applyin…

    Graylog Graylog Web Interface
  • Medium 5.3
    CVE-2026-1439

    Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

    Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applyin…

    Graylog Graylog Web Interface
  • Medium 5.3
    CVE-2026-1438

    Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

    Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applyin…

    Graylog Graylog Web Interface
  • Medium 5.3
    CVE-2026-1437

    Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

    Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applyin…

    Graylog Graylog Web Interface