CVE-2026-78002
High · 7.5CVSS
7.5
EPSS
0.7%
Published
Aug 27, 2026
CISA due date
—
The record
A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful exploitation can lead to a denial of service (DoS) for the affected system.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-18743 A flaw was found in popt. CWE-131
- CVE-2026-65706 FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the… CWE-131
- CVE-2026-65705 FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the… CWE-131
- CVE-2026-54696 Ruby JSON is a JSON implementation for Ruby. CWE-131
- CVE-2026-46521 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-131
- CVE-2026-11604 An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win… CWE-131
- CVE-2026-49841 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from… CWE-131
- CVE-2026-42915 Incorrect calculation of buffer size in Windows VMSwitch allows an authorized attacker to… CWE-131