Known vulnerabilities in rsyslog 8

Software: rsyslog
Version: 8
Software CPE: cpe:2.3:a:rsyslog_com:rsyslog:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting rsyslog version 8 rsyslog 8 is affected by 4 vulnerabilities: 2 high, 2 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151556 - Stack-based buffer overflow
CVE-2026-93403
CWE-121 Medium
No
No
8.2606.0 22.09.2026 SB20260720175
#VU144420 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 High
No
No
- 20.08.2026 SB2026082070
#VU138583 - Stack-based buffer overflow
CVE-2026-61548
CWE-121 Medium
No
No
8.2606.0 20.07.2026 SB20260720175
SB2026072478
SB2026080382
and 3 more
#VU62830 - Heap-based Buffer Overflow
CVE-2022-24903
CWE-122 High
No
No
8.2204.1 05.05.2022 SB2022050524
SB2022050920
SB2022052425
and 45 more