What is CVE-2026-39879?

CVE-2026-39879 is a high-severity vulnerability in Syslog-Ng, classified under CWE-150. CVSS score: 7.1/10. Published 2026-07-20.

How severe is CVE-2026-39879?

High severity. CVSS v3 base score is 7.1 out of 10.

Vulnerability in Syslog-Ng

CVE-2026-39879

Due to a missing sanitization call in [`afsql_dd_run_query`](https://github.com/syslog-ng/syslog-ng/blob/649e6e18e3459fb4467000a88dfb12fa97f9719c/modules/afsql/afsql.c#L219), syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and syslog-ng Store Box 7.8

EPSS: 0.003 (18.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H.

Affected products

Syslog-ng — versions < 4.12

Weakness classification (CWE)

CWE-150

References

security-advisories@github.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2026-39879?: CVE-2026-39879 is a high-severity vulnerability in Syslog-Ng, classified under CWE-150. CVSS score: 7.1/10. Published 2026-07-20.
How severe is CVE-2026-39879?: High severity. CVSS v3 base score is 7.1 out of 10.