{"action":"Upgrade org.graylog2:graylog2-server to 7.1.4 or later.","affected":[{"fixed":"7.1.4","introduced":"7.1.0"}],"component":"org.graylog2:graylog2-server","cve_ids":["CVE-2026-55425"],"ecosystem":"Maven","epss":0.00412,"exploited":false,"fixed_versions":["7.1.4"],"ghsa_id":"GHSA-q79r-r9xg-r863","id":"tcs_01M5N98Z0Q1FWQBYW098E3BDJG","modified_at":"2026-08-28T18:25:39.229265Z","published_at":"2026-08-28T18:09:29Z","references":["https://osv.dev/vulnerability/GHSA-q79r-r9xg-r863","https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-q79r-r9xg-r863","https://github.com/Graylog2/graylog2-server/pull/26284","https://github.com/Graylog2/graylog2-server/commit/1d1a91d99c3d2d8993e61c3c52344648163d3a21","https://github.com/Graylog2/graylog2-server/commit/da7767a44233b6a683d0713eed08da31ce0e77b5","https://github.com/Graylog2/graylog2-server","https://github.com/Graylog2/graylog2-server/releases/tag/7.1.4","https://github.com/Graylog2/graylog2-server/releases/tag/7.2.0-alpha.2"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GHSA-q79r-r9xg-r863","url":"https://osv.dev/vulnerability/GHSA-q79r-r9xg-r863"}],"summary":"Graylog Server: System Catalog titles endpoint can be used to retrieve values of protected database fields"}