Graylog 6.2.6 → 7.1.0
41 releases · 0 breaking changes · 9 security fixes · 0 advisories fixed
9security0breaking0deprecated0feature0fix
Breaking changes
None in the release notes.
Security changes
- security Fixes GHSA-w9wq-g358-3x8g: Privilege escalation via user creation and user permission/role updates in 7.0.13
- security Fixes CVE-2026-69190: Manager-to-Owner privilege escalation on saved searches and dashboards in 7.0.9
- security Fixes CVE-2026-55841: Fortigate syslog message parser can be exploited to modify or delete fields from the original message in 7.0.7
- security Fixes CVE-2026-55867: Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens in 7.0.7
- security Fixes CVE-2026-69190: Manager-to-Owner privilege escalation on saved searches and dashboards in 7.0.0
- security Fixes CVE-2026-55867: Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens in 7.0.0
- security Fixes CVE-2026-69190: Manager-to-Owner privilege escalation on saved searches and dashboards in 6.3.14
- security Fixes CVE-2026-55841: Fortigate syslog message parser can be exploited to modify or delete fields from the original message in 6.3.12
- security Fixes CVE-2026-55867: Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens in 6.3.12
Every release in between
securityFixes GHSA-w9wq-g358-3x8g: Privilege escalation via user creation and user permission/role updates
securityFixes CVE-2026-69190: Manager-to-Owner privilege escalation on saved searches and dashboards
securityFixes CVE-2026-55841: Fortigate syslog message parser can be exploited to modify or delete fields from the original message
securityFixes CVE-2026-55867: Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens
securityFixes CVE-2026-69190: Manager-to-Owner privilege escalation on saved searches and dashboards
securityFixes CVE-2026-55867: Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens
securityFixes CVE-2026-69190: Manager-to-Owner privilege escalation on saved searches and dashboards
securityFixes CVE-2026-55841: Fortigate syslog message parser can be exploited to modify or delete fields from the original message
securityFixes CVE-2026-55867: Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens