Login Request a demo
AL
Product
Apache log4net
by Apache Software Foundation · last CVE Oct 6, 2026
6
CVEs
0
On KEV
5.3
Max CVSS
6
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 0Medium 6Low 0
Severity
All severities6Critical0High0Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache log4net to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-105244
5.3
1%
Oct 6
Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content
Affected: 1.2.12 before 3.5.0; 56a2e146e21ff4737e1ff3ec308810e667873947 before 77717061b20d4346b6c0ce6b54643d85fb348bc7
CVE-2026-105243
5.3
1%
Oct 6
Apache log4net: Oversize EventLogAppender record silently discarded
Affected: 1.2.9 before 3.5.0; 02e1e115435888485f2e28b414d267e39e799e07 before 28fbfb25678c48a8cc5bc9b94ead0dddfc39ffed
CVE-2026-105242
5.3
1%
Oct 6
Apache log4net: Request validation failure drops the event in the aspnet-request converter
Affected: 1.2.11 before 3.5.0; 243f1e9f3ee235955bade4b4fe664a903378719a before 145203420c579a703008b4b723b6a080757f4964
CVE-2026-105241
5.3
1%
Oct 6
Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch
Affected: 1.2.9 before 3.5.0; 02e1e115435888485f2e28b414d267e39e799e07 before 4d2e10f0908199604b4326f9df6d0b43b871e333
CVE-2026-105240
5.3
1%
Oct 6
Apache log4net: NUL character truncates OutputDebugStringAppender records
Affected: 1.2.9 before 3.5.0; 02e1e115435888485f2e28b414d267e39e799e07 before 6046fe9d7f353b49fe995361c071ec2eea8f7ef6
CVE-2026-105239
5.3
1%
Oct 6
Apache log4net: NUL character truncates EventLogAppender records
Affected: 1.2.9 before 3.5.0; 02e1e115435888485f2e28b414d267e39e799e07 before dc5855a0720c91590fd7a81d729ea01fdd69e000
Showing 6