rsyslog CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH rsyslog CVE published 2026-10-22

CVE-2026-92709

CVE-2026-92709: Rsyslog DynFile Path Traversal vulnerability allows for arbitrary file write as root, potentially leading to RCE. Affected versions range from 1.15.0 to 8.2610.0. The vulnerability is caused by the Rsyslog omfile dynaFile facility's use of templates to generate flexible output paths, which can lead to a path traversal vulnerability if not properly secured. No publicly available patches exi [truncated]