CVE-2026-61548: rsyslog mmpstrucdata stack overflow

Published Jul 20, 2026

Updated

Last updated 20 July 2026

Affected Software

2 affected componentsFixes available

rsyslog Rsyslog

debian/rsyslog<=8.2102.0-2+deb11u1, <=8.2302.0-1+deb12u1, <=8.2504.0-1

8.2606.0-4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/rsyslog to a version that resolves this vulnerability.
Fixed in 8.2606.0-4

Event History

Jul 24, 2026

CVE Published

via Ubuntu·06:40 PM

Data Sourced

via Ubuntu·06:40 PM

RemedyDescriptionSeverityAffected Software

Data Sourced

via Debian·06:42 PM

DescriptionAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-61548?

CVE-2026-61548 has a risk score of 60, indicating a moderate severity level.

How do I fix CVE-2026-61548?

To mitigate CVE-2026-61548, update to the latest version of rsyslog that addresses this stack overflow issue.

What software is affected by CVE-2026-61548?

CVE-2026-61548 affects the rsyslog software, specifically distributions using Debian/rsyslog.

What does CVE-2026-61548 describe?

CVE-2026-61548 describes a stack overflow vulnerability in rsyslog's mmpstrucdata component.

When was CVE-2026-61548 published?

CVE-2026-61548 was published on July 20, 2026.

CVE-2026-61548: rsyslog mmpstrucdata stack overflow

Affected Software

Remediation

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-61548?

How do I fix CVE-2026-61548?

What software is affected by CVE-2026-61548?

What does CVE-2026-61548 describe?

When was CVE-2026-61548 published?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-61548?

How do I fix CVE-2026-61548?

What software is affected by CVE-2026-61548?

What does CVE-2026-61548 describe?

When was CVE-2026-61548 published?