Critical Security Flaw in Rsyslog Package: CVE-2026-19654
Summary
RHSA-2026:84571: Red Hat Security Advisory: rsyslog security update. Affects rsyslog versions < 0:8.2310.0-4.el9_4.1. Fixed in 0:8.2310.0-4.el9_4.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Rsyslog is a high-performance logging system that supports various protocols and formats for log data. It is widely used in enterprise environments for log management and analysis. The package includes various modules, such as rsyslog-crypto and rsyslog-elasticsearch, which enhance its capabilities. However, a recent vulnerability has been identified that could potentially compromise the integrity of the logging system.
Vulnerability Detail
The vulnerability, identified as CVE-2026-19654, arises from a flaw in the Rsyslog package that could allow an attacker to exploit the logging system. This could lead to unauthorized access to sensitive log data or even denial of service. The vulnerability has a CVSS score of 7.5, indicating a high severity level. It is crucial for users of Rsyslog to understand the implications of this vulnerability and take necessary actions to mitigate risks.
How To Fix
Minimum fixed version
0:8.2310.0-4.el9_4.1
This is the first release that contains the fix.
sudo dnf update rsyslogTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the Rsyslog service by configuring firewall rules to restrict incoming connections. This will help mitigate the risk until the package is updated.
Conclusion
The Rsyslog package has a critical vulnerability (CVE-2026-19654) that poses significant risks to log data integrity. Users are strongly advised to update to the patched version to safeguard their systems. Implementing temporary workarounds can help mitigate risks until the update is applied.
See every vulnerability recorded for rsyslog →
FAQ
CVE-2026-19654 is a security vulnerability in the Rsyslog package that could allow unauthorized access to log data.
The vulnerability has a CVSS score of 7.5, indicating it is of high severity and should be addressed promptly.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider implementing firewall rules to restrict access to the Rsyslog service as a temporary measure.
More information about Rsyslog can be found on its official website, which provides documentation and resources for users.
Related vulnerabilities
Recent vulnerabilities recorded for rsyslog.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
