Is Graylog 6.2.7 affected?

CVSS 7.5

5 known vulnerabilities affect 6.2.7 (highest CVSS 7.5).

Your branch 6.2 has reached end of life (Apr 28, 2026).

53 newer releases in its track, up to 7.2.1. What changed up to 7.2.1

Vulnerabilities affecting 6.2.7

7.5
GHSA-xwgc-q8x5-538w IPFIX input parser can be exploited to consume excessive CPU and block message processing
7.5
CVE-2026-55841 Fortigate syslog message parser can be exploited to modify or delete fields from the original message fixed in 6.3.12
7.2
GHSA-w9wq-g358-3x8g Privilege escalation via user creation and user permission/role updates fixed in 7.0.13
5.3
GHSA-vpqc-v737-94g9 Palo Alto Networks input parser can be exploited to consume excessive CPU and delay message processing
5.3
CVE-2026-55867 Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens fixed in 6.3.12