Is Graylog 7.1.0 affected?

CVSS 7.5

7 known vulnerabilities affect 7.1.0 (highest CVSS 7.5).

13 newer releases in its track, up to 7.2.1. What changed up to 7.2.1

Vulnerabilities affecting 7.1.0

7.5
GHSA-xwgc-q8x5-538w IPFIX input parser can be exploited to consume excessive CPU and block message processing
7.5
CVE-2026-55841 Fortigate syslog message parser can be exploited to modify or delete fields from the original message fixed in 7.1.2
7.2
GHSA-w9wq-g358-3x8g Privilege escalation via user creation and user permission/role updates fixed in 7.1.9
6.3
CVE-2026-69190 Manager-to-Owner privilege escalation on saved searches and dashboards fixed in 7.1.4
5.3
GHSA-vpqc-v737-94g9 Palo Alto Networks input parser can be exploited to consume excessive CPU and delay message processing
5.3
CVE-2026-55867 Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens fixed in 7.1.2
5.0
CVE-2026-55425 System Catalog titles endpoint can be used to retrieve values of protected database fields