Vulnerabilities

TI-2026-68924 CVE-2026-105244 · GHSA-g956-ph29-3vq5

RemoteSyslogAppender in Apache log4net silently drops non-ASCII text

LOW 32

Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00823 Published 2026-10-06 Fixed in 3.5.0 CWE-116

TI-2026-68923 CVE-2026-105243 · GHSA-j8mm-w573-8v6c

LOW 32

Insufficient Logging vulnerability in the EventLogAppender of Apache log4net.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00807 Published 2026-10-06 Fixed in 3.5.0 CWE-778

TI-2026-68922 CVE-2026-105242 · GHSA-r886-mf8r-26c7

LOW 32

Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00823 Published 2026-10-06 Fixed in 3.5.0 CWE-755

TI-2026-68921 CVE-2026-105241 · GHSA-r5vq-477m-wcfc

LOW 32

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00824 Published 2026-10-06 Fixed in 3.5.0 CWE-176

TI-2026-68920 CVE-2026-105240 · GHSA-q2xj-998m-58gf

LOW 32

Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00807 Published 2026-10-06 Fixed in 3.5.0 CWE-158

TI-2026-68919 CVE-2026-105239 · GHSA-wf3f-44xg-jxj3

LOW 32

Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00823 Published 2026-10-06 Fixed in 3.5.0 CWE-158