CVE-2026-19654
⚠️ highSummary
A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.
CVSS Score
7.5
High
EPSS Score
-
Published Date
2026-08-12
First Seen: 2026-08-13
📊 Relative Risk Intelligence
This CVE is Moderate Risk - more severe than 68.2% of all 344,170 vulnerabilities in our database.
#109,511
Above average severity
Severity Percentile
Last Modified
2026-08-12
Source
NVD 🔗
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE IDs (Weakness Types)