Apache Log4net (Apache Software Foundation) - vulnerabilities (CVEs)

6 CVEs, 6 in the last 30 days, 1 known versions, newest CVE from 2026-10-06. Vendor: Apache Software Foundation.

CVEs of Apache Log4net

• CVE-2026-105244 - CVSS 5.3 (medium), 2026-10-06: Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was…
• CVE-2026-105243 - CVSS 5.3 (medium), 2026-10-06: Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event…
• CVE-2026-105242 - CVSS 5.3 (medium), 2026-10-06: Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers…
• CVE-2026-105241 - CVSS 5.3 (medium), 2026-10-06: Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as…
• CVE-2026-105240 - CVSS 5.3 (medium), 2026-10-06: Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net. A NUL character in logged content…
• CVE-2026-105239 - CVSS 5.3 (medium), 2026-10-06: Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL character in logged content ended the…