Skip to content
OpenAdvisories

Vendor

Graylog

7 known vulnerabilities.

Products

Graylog Web Interface 7
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-1436

    Improper Access Control (IDOR) vulnerability in Graylog Web Interface

    Improper Access Control (IDOR) in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user's profiles without proper authorization checks. Exploiting this vulnerability allows valid users …

    Graylog Graylog Web Interface