Advisories · Technology

syslog-ng.

Every CVE that names syslog-ng among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-39879 CVE record

CVSS 7.1 High

SQL injection in syslog-ng SQL destionation driver
- syslog-ng
- CWE-150
Not analysed yet 20 Jul 2026
CVE-2024-47619 CVE record

CVSS 7.5 High

tranport: TLS host name wildcard matching too lax
- syslog-ng
- Weak cryptography or TLS
Not analysed yet 7 May 2025