Syslog-ng Syslog-ng
2 CVEs affecting Syslog-ng Syslog-ng. Latest disclosed: 2026-07-20. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-47619 | High | 7.5 | 2025-05-07 | syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It… |
CVE-2026-39879 | High | 7.1 | 2026-07-20 | Due to a missing sanitization call in [`afsql_dd_run_query`](https://github.com/syslog-ng/syslog-ng/blob/649e6e18e3459fb4467000a88dfb12fa97f9719c/modules/afsql… |