Bundesamt für Sicherheit in der Informationstechnik Dell · rsyslog: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung
Affects Bundesamt für Sicherheit in der Informationstechnik DellSource GCVE Database
Not known to be exploited : upgrade to 5.36.00.16 soon.
Data as of 9 Nov 2026, 14:48 UTC
Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
- Patch
- Available – fixed in 5.36.00.16
Exploitation evidence
Disclosed: evidence found.
CVE published 20 Jul 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 9 Nov 2026.
What to do
Upgrade Bundesamt für Sicherheit in der Informationstechnik Dell to 5.36.00.16.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Bundesamt für Sicherheit in der Informationstechnik Dell | Affected
| Fixed in
|
AI-suggested
Update rsyslog to version 5.36.00.16 or later. For Ubuntu users, apply the security updates provided in USN-8598-1 for supported LTS releases (26.04, 24.04, 22.04). A standard system update will apply the necessary fixes. No additional mitigation steps are indicated by the vendor.
Description
A vulnerability in rsyslog's imptcp and mmpstrucdata modules allows remote attackers to cause denial of service by crashing the service through improper handling of regex-based TCP framing and oversized RFC5424 structured data. The issue affects versions prior to 5.36.00.16, which contains the fix.
References
- wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2421.json (opens in a new tab)
- wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2421 (opens in a new tab)
- github.com/rsyslog/rsyslog/security/advisories/GHSA-8qmr-c66f-g368 (opens in a new tab)
- seclists.org/oss-sec/2026/q3/173 (opens in a new tab)
- cybersecurity-help.cz/vdb/SB20260720175 (opens in a new tab)
- ubuntu.com/security/notices/USN-8598-1 (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-August/028064.html (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-August/028143.html (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-August/028144.html (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-August/028164.html (opens in a new tab)
- lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ITI24RNGLU5SAR37VP52SB36X6EK27GK/ (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-August/028304.html (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-August/028322.html (opens in a new tab)
- dell.com/support/kbdoc/000503504/dsa-2026-386-security-update-f (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-October/029758.html (opens in a new tab)
- lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WRYHXY5JCWWUDEJNWZUINAR6KEW7HUL2/ (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-November/030490.html (opens in a new tab)