graylog2-server — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in graylog2-server, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2025-53106	Graylog vulnerable to privilege escalation through API tokens CWE-285	8.8^AI	High^AI	2025-07-02
CVE-2025-46827	Graylog Allows Session Takeover via Insufficient HTML Sanitization CWE-79	8.0	High	2025-05-07
CVE-2025-30373	Graylog Authenticated HTTP inputs do ingest message even if Authorization header is missing or has wrong value CWE-285	6.5	Medium	2025-04-07
CVE-2024-52506	Graylog can leak other users' reports via concurrent PDF report rendering CWE-200	4.3^AI	Medium^AI	2024-11-18
CVE-2024-24824	graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request CWE-284	8.8	High	2024-02-07
CVE-2024-24823	graylog2-server Session Fixation vulnerability through cookie injection CWE-384	5.7	Medium	2024-02-07
CVE-2023-41045	Insecure source port usage for DNS queries in Graylog CWE-345	3.7	Low	2023-08-31
CVE-2023-41044	Partial path traversal vulnerability in Support Bundle feature of Graylog CWE-22	3.3	Low	2023-08-31
CVE-2023-41041	User session is still usable after logout in graylog2-server CWE-613	2.6	Low	2023-08-30

All 9 known CVE vulnerabilities affecting graylog2-server with full Chinese analysis, references, and POCs where available.