Is Graylog 7.0.1 affected?
Nov 24, 2025 · Release notes ↗
6 known vulnerabilities affect 7.0.1 (highest CVSS 7.5).
28 newer releases in its track, up to 7.2.1. What changed up to 7.2.1
Vulnerabilities affecting 7.0.1
- 7.5 GHSA-xwgc-q8x5-538w IPFIX input parser can be exploited to consume excessive CPU and block message processing
- 7.5 CVE-2026-55841 Fortigate syslog message parser can be exploited to modify or delete fields from the original message fixed in 7.0.7
- 7.2 GHSA-w9wq-g358-3x8g Privilege escalation via user creation and user permission/role updates fixed in 7.0.13
- 6.3 CVE-2026-69190 Manager-to-Owner privilege escalation on saved searches and dashboards fixed in 7.0.9
- 5.3 GHSA-vpqc-v737-94g9 Palo Alto Networks input parser can be exploited to consume excessive CPU and delay message processing
- 5.3 CVE-2026-55867 Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens fixed in 7.0.7
Newer releases
| 7.2.1 | Oct 19, 2026 | 7.0.1 → 7.2.1 |
| 7.2.0 | Oct 12, 2026 | 7.0.1 → 7.2.0 |
| 7.1.11 | Oct 19, 2026 | 7.0.1 → 7.1.11 |
| 7.1.10 | Oct 7, 2026 | 7.0.1 → 7.1.10 |
| 7.1.9 | Sep 2, 2026 | 7.0.1 → 7.1.9 |
| 7.1.8 | Aug 18, 2026 | 7.0.1 → 7.1.8 |
| 7.1.7 | Aug 5, 2026 | 7.0.1 → 7.1.7 |
| 7.1.6 | Jul 23, 2026 | 7.0.1 → 7.1.6 |
| 7.1.5 | Jul 8, 2026 | 7.0.1 → 7.1.5 |
| 7.1.4 | Jul 1, 2026 | 7.0.1 → 7.1.4 |
| 7.1.3 | Jun 3, 2026 | 7.0.1 → 7.1.3 |
| 7.1.2 | May 20, 2026 | 7.0.1 → 7.1.2 |
| 7.1.1 | May 8, 2026 | 7.0.1 → 7.1.1 |
| 7.1.0 | May 4, 2026 | 7.0.1 → 7.1.0 |
| 7.0.15 | Oct 19, 2026 | 7.0.1 → 7.0.15 |