Skip to content

Vulnerabilities of Apache Software Foundation Apache Log4net

Is your version affected?

CVE Summary Score Published
CVE-2026-105244 Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net 5.3 Medium Oct 6, 2026
CVE-2026-105243 Insufficient Logging vulnerability in the EventLogAppender of Apache log4net 5.3 Medium Oct 6, 2026
CVE-2026-105242 Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net 5.3 Medium Oct 6, 2026
CVE-2026-105241 Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net 5.3 Medium Oct 6, 2026
CVE-2026-105240 Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net 5.3 Medium Oct 6, 2026
CVE-2026-105239 Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net 5.3 Medium Oct 6, 2026
CVE-2026-40021 Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layouts.html#layout-list and … 6.3 Medium Apr 10, 2026

Other Apache Software Foundation products