CVE-2026-55556

Name of the Vulnerable Software and Affected Versions rsyslog (affected versions not specified)

Description A heap overflow exists in the imhttp module, which is used for receiving logs via HTTP. This issue occurs when HTTP Basic Authentication is enabled and can be triggered by an attacker with access to the HTTP endpoint. The imhttp module must be built, installed, loaded, and configured for the issue to be exploitable.

Recommendations As a temporary workaround, disable HTTP Basic Authentication or restrict access to the imhttp endpoint to minimize the risk of exploitation.