https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 21:20:19 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-92709 <p>Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog&#39;s omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file names. A deployment becomes unsafe when a dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path handling. In that configuration, the rendered path can escape the operator&#39;s intended log directory. This is not limited to the RFC5424 HOSTNAME field. Any untrusted value that reaches a dynaFile path component can create the condition. At time of publication, there are no publicly available patches.</p> <p>Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog&#39;s omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file names. A deployment becomes unsafe when a dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path handling. In that configuration, the rendered path can escape the operator&#39;s intended log directory. This is not limited to the RFC5424 HOSTNAME field. Any untrusted value that reaches a dynaFile path component can create the condition. At time of publication, there are no publicly available patches.</p> https://db.gcve.eu/vuln/fkie_cve-2026-92709 https://db.gcve.eu/vuln/ubuntu-cve-2026-92709 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: rsyslog, Ubuntu:Pro:16.04:LTS: rsyslog, Ubuntu:Pro:18.04:LTS: rsyslog, Ubuntu:Pro:20.04:LTS: rsyslog, Ubuntu:22.04:LTS: rsyslog, Ubuntu:24.04:LTS: rsyslog, Ubuntu:26.10: rsyslog, Ubuntu:26.04:LTS: rsyslog</p> <p>[Unknown description]</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: rsyslog, Ubuntu:Pro:16.04:LTS: rsyslog, Ubuntu:Pro:18.04:LTS: rsyslog, Ubuntu:Pro:20.04:LTS: rsyslog, Ubuntu:22.04:LTS: rsyslog, Ubuntu:24.04:LTS: rsyslog, Ubuntu:26.10: rsyslog, Ubuntu:26.04:LTS: rsyslog</p> <p>[Unknown description]</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-92709