ZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution Vulnerability
ZDI disclosed an unauthenticated format-string bug in QNAP TS-453E syslog enabling network-adjacent code execution.
Stories per day · 30 days
3 RSS
5 stories, newest first · one card per story
Stories tagged #syslog
rsyslog RainerScript replace() output length overflow (GHSA-48f2-29wv-5jgc)
rsyslog disclosed a RainerScript replace() output-length overflow that default small-message configurations do not expose.
CVE-2026-105244: Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content
Apache log4net RemoteSyslogAppender strips non-ASCII characters, CVE-2026-105244, CVSS 5.3.
rsyslog: mmpstrucdata denial of service fixed in 8.2606.0
rsyslog 8.2606.0 fixes a denial-of-service flaw in the mmpstrucdata module parsing RFC 5424 structured data with oversized parameter values.
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability
Cisco patched an ASA/FTD rate-limiting flaw where TCP SYN floods trigger excessive syslog 419002 messages, causing high CPU and degraded performance.