CVE 2026 44024

www.tenable.com • June 30, 2026

Share: View original

Fluentd is Vulnerable to Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

Published : 2026-06-26

Vector : CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Fluentd Enable Remote Code Execution and SSRF Fluentd v1.19.3 addresses multiple vulnerabilities, including a critical RCE flaw tracked as CVE-2026-44024. These vulnerabilities can allow unauthenticated remote attackers to execute arbitrary code, access sensitive data, and perform server-side request forgery (SSRF). The issues primarily affect instances processing untrusted input or using vulnerable placeholder features. The impact is significant, as compromised Fluentd instances can expose sensitive infrastructure information across connected systems. No public evidence of exploitation has been reported yet, but organizations are urged to prioritize updates. The Centre for Cybersecurity Belgium recommends immediate patching and enhanced monitoring to detect potential intrusions. 3 sources 74

Extracted Entities

Attack Types (1)

Zero-day Exploit

Platforms (1)