PT-2026-52219
CVE-2026-55556
·
Published
2026-06-23
·
Updated
2026-09-28
Description by
CVSS 4.0
8.2
HighMetricsAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
rsyslog (affected versions not specified)
Description
A heap overflow exists in the
imhttp module, which is used for receiving logs via HTTP. This issue occurs when HTTP Basic Authentication is enabled and can be triggered by an attacker with access to the HTTP endpoint. The imhttp module must be built, installed, loaded, and configured for the issue to be exploitable.Recommendations
As a temporary workaround, disable HTTP Basic Authentication or restrict access to the
imhttp endpoint to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾