Ffluent

Products

Exploited and recent CVEs

• CVE-2026-61674 Critical 9.2 Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler 0.7%
• CVE-2026-44162 Low 2.7 fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3` 0.5%
• CVE-2026-44161 High 7.2 Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http` 0.4%
• CVE-2026-44160 High 7.5 Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward` 0.6%
• CVE-2026-44025 High 7.5 Fluentd: Exposure of Sensitive Information via Monitor Agent API 0.5%
• CVE-2026-44024 Critical 9.8 Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder 1.1%
• CVE-2022-39379 Low 3.1 Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration) 45.0%
• CVE-2021-41186 Medium 5.9 ReDoS vulnerability in parser_apache2 2.2%