Critical Security Update for Rsyslog: Addressing Vulnerabilities in Logging Service
Summary
RHSA-2026:80817: Red Hat Security Advisory: rsyslog security update. Affects rsyslog versions < 0:8.2102.0-15.el8_10.3. Fixed in 0:8.2102.0-15.el8_10.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Rsyslog is a high-performance logging system that provides a reliable way to collect, process, and store log messages from various sources. It is widely used in enterprise environments for its flexibility and extensibility. The package includes features such as message filtering, forwarding, and support for various log formats. However, recent vulnerabilities have been identified that could potentially compromise the integrity and availability of log data.
Vulnerability Detail
The vulnerabilities identified in Rsyslog, specifically CVE-2026-19654 and CVE-2026-78002, stem from flaws in the handling of log messages. These vulnerabilities could allow an attacker to exploit the logging service, leading to unauthorized access or denial of service. The potential ramifications include loss of log integrity, disruption of logging services, and exposure of sensitive information. The vulnerabilities have been assigned a CVSS score of 7.5, indicating a high severity level that necessitates immediate attention.
How To Fix
Minimum fixed version
0:8.2102.0-15.el8_10.3
This is the first release that contains the fix.
sudo dnf update rsyslogTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider temporarily disabling the logging service or restricting access to it until the update can be applied. This can be done by stopping the service with the command:
sudo systemctl stop rsyslog
However, this is not a long-term solution and should be followed by an update as soon as possible.
Conclusion
The identified vulnerabilities in Rsyslog pose significant risks to logging integrity and service availability. Immediate action is required to update the affected packages to ensure system security. Users are encouraged to monitor their systems and apply the necessary updates promptly.
See every vulnerability recorded for rsyslog →
FAQ
The vulnerabilities are identified as CVE-2026-19654 and CVE-2026-78002, which could lead to unauthorized access and denial of service.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
The vulnerabilities have a CVSS score of 7.5, indicating a high severity level.
Consider stopping the Rsyslog service temporarily and restricting access until you can apply the update.
You can refer to the Red Hat Security Advisory for detailed information on the vulnerabilities and their implications.
Related vulnerabilities
Recent vulnerabilities recorded for rsyslog.
