Vulnerability · Published Aug 12, 2026 · Assigned by redhat

CVE-2026-19654Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

High 7.5

In plain English

A high-severity out-of-bounds read in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.8%top 44.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
AlmaLinux:10	rsyslog	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-crypto	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-crypto	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-crypto	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-doc	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-doc	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-doc	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-elasticsearch	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-elasticsearch	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-elasticsearch	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-gnutls	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-gnutls	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-gnutls	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-gssapi	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-gssapi	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-gssapi	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-kafka	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-kafka	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-kafka	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:9	rsyslog-logrotate	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-mmaudit	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-mmaudit	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-mmaudit	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-mmfields	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-mmfields	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-mmfields	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-mmjsonparse	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-mmjsonparse	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-mmjsonparse	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-mmkubernetes	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-mmkubernetes	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-mmkubernetes	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-mmnormalize	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-mmnormalize	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-mmnormalize	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-mmsnmptrapd	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-mmsnmptrapd	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-mmsnmptrapd	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-mysql	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-mysql	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-mysql	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-omamqp1	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-omamqp1	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-omamqp1	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-openssl	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-openssl	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-openssl	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-pgsql	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-pgsql	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-pgsql	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-relp	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-relp	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-relp	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-snmp	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-snmp	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-snmp	8.2510.0-2.el9_8.1	ALSA-2026:67583
AlmaLinux:10	rsyslog-udpspoof	8.2510.0-5.el10_2.1	ALSA-2026:67584
AlmaLinux:8	rsyslog-udpspoof	8.2102.0-15.el8_10.3	ALSA-2026:80817
AlmaLinux:9	rsyslog-udpspoof	8.2510.0-2.el9_8.1	ALSA-2026:67583
Alpine:v3.24	rsyslog	8.2608.0-r0	ALPINE-CVE-2026-19654
Debian:12	rsyslog	no fix listed	DEBIAN-CVE-2026-19654
Debian:13	rsyslog	8.2504.0-1+deb13u1	DEBIAN-CVE-2026-19654
Debian:14	rsyslog	8.2608.0-1	DEBIAN-CVE-2026-19654
Rocky Linux:10	rsyslog	0:8.2510.0-5.el10_2.1	RLSA-2026:67584
Rocky Linux:8	rsyslog	0:8.2102.0-15.el8_10.3	RLSA-2026:80817
Rocky Linux:9	rsyslog	0:8.2510.0-2.el9_8.1	RLSA-2026:67583
Ubuntu:22.04:LTS	rsyslog	8.2112.0-2ubuntu2.4	UBUNTU-CVE-2026-19654
Ubuntu:24.04:LTS	rsyslog	8.2312.0-3ubuntu9.3	UBUNTU-CVE-2026-19654
Ubuntu:26.04:LTS	rsyslog	8.2512.0-1ubuntu4.1	UBUNTU-CVE-2026-19654

Affected products (as reported)

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 10	see references
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 8	see references
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	see references
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	see references
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	see references
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	see references
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	see references
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	see references
Red Hat	Red Hat Update Infrastructure 5	see references
Red Hat	Red Hat Enterprise Linux 6	see references
Red Hat	Red Hat Enterprise Linux 6	see references
Red Hat	Red Hat Enterprise Linux 7	see references

Weakness: CWE-125 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

RHSA-2026:66405 vendor-advisory, x_refsource_REDHAT
RHSA-2026:67583 vendor-advisory, x_refsource_REDHAT
RHSA-2026:67584 vendor-advisory, x_refsource_REDHAT
RHSA-2026:71603 vendor-advisory, x_refsource_REDHAT
RHSA-2026:80817 vendor-advisory, x_refsource_REDHAT
RHSA-2026:84571 vendor-advisory, x_refsource_REDHAT
RHSA-2026:84576 vendor-advisory, x_refsource_REDHAT
RHSA-2026:86124 vendor-advisory, x_refsource_REDHAT
RHSA-2026:87408 vendor-advisory, x_refsource_REDHAT
RHSA-2026:91582 vendor-advisory, x_refsource_REDHAT
RHSA-2026:95573 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-19654 vdb-entry, x_refsource_REDHAT
RHBZ#2502868 issue-tracking, x_refsource_REDHAT
https://github.com/rsyslog/rsyslog/security/advisories/GHSA-cj5r-wh2m-7w29