Skip to content
SUSE rsyslog Update Addresses Code Execution Vulnerability

SUSE rsyslog Update Addresses Code Execution Vulnerability

First seen 5 Nov 2026, 16:19 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 5, 2026 at 16:20 UTC
  • •CVE-2026-92709 allows arbitrary code execution via unsafe file handling.
  • •Affected systems include SUSE Linux Enterprise Server 12 SP5 LTSS and openSUSE.
  • •Users are urged to apply the critical patches released on November 3, 2026.

SUSE released an update for rsyslog to address a vulnerability (CVE-2026-92709) that allows arbitrary code execution due to unsafe file handling. This flaw arises from the `omfile` `dynaFile` template using untrusted input as a path component without secure-path handling. Affected systems include SUSE Linux Enterprise Server 12 SP5 LTSS and various versions of openSUSE. The vulnerability has a CVSS score of 8.1, indicating a high severity level. Patch instructions are provided for several SUSE products, and users are urged to apply the updates promptly. The vulnerability was disclosed on October 22, 2026, and is now patched as of November 3, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-22
CVE-2026-92709 published
SUSE disclosed a critical vulnerability in rsyslog affecting multiple systems due to unsafe file handling.
Linuxsecurity
2026-11-03
Patch released for rsyslog
SUSE released an update addressing CVE-2026-92709, urging users to apply the patch immediately.
Linuxsecurity

More articles in this cluster (3)

Following this threat?

Track CVE-2026-92709 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 2

Common questions

What systems are affected by CVE-2026-92709?
Affected systems include SUSE Linux Enterprise Server 12 SP5 LTSS and various versions of openSUSE.
What is the severity of this vulnerability?
CVE-2026-92709 has a CVSS score of 8.1, indicating a high severity level.
How should I apply the patch?
Users can apply the patch using SUSE's recommended installation methods like YaST online_update or 'zypper patch'.