Product by Open Source
Fluentd
6 known vulnerabilities in Fluentd (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-44024 | Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder | 9.8 | |
| High | CVE-2026-44160 | Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward` | 7.5 | |
| High | CVE-2026-44025 | Fluentd: Exposure of Sensitive Information via Monitor Agent API | 7.5 | |
| High | CVE-2026-44161 | Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http` | 7.2 | |
| High | CVE-2025-32414 | XMLSoft libxml2: Return of Wrong Status Code | 5.6 | |
| Low | CVE-2025-6170 | Libxml2: stack buffer overflow in xmllint interactive shell command handling | 2.5 |