CVE-2026-92789
Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirect
CVSS score
7.1
EPSS probability
%0.4
Risk score
0.0
Published
29 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.5
CVE-2026-55841
Graylog: Fortigate syslog message parser can be exploited to modify or delete fields from the original message
G
Patch status unknownEPSS %1
5.3
CVE-2026-55867
Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens
G
Patch status unknownEPSS %1
6.3
CVE-2026-69190
Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards
G
Patch status unknownEPSS %0
5.0
CVE-2026-55425
Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields
G
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-92789"