Product by Apache Software Foundation

    Apache Log4net

    7 known vulnerabilities in Apache Log4net (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Apache Log4net (Apache Software Foundation)
    MediumCVE-2026-105241

    Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch

    also in 1 other product

    		5.3
    MediumCVE-2026-105244

    Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content

    also in 1 other product

    		5.3
    MediumCVE-2026-105242

    Apache log4net: Request validation failure drops the event in the aspnet-request converter

    also in 1 other product

    		5.3
    MediumCVE-2026-105239

    Apache log4net: NUL character truncates EventLogAppender records

    also in 1 other product

    		5.3
    MediumCVE-2026-105243

    Apache log4net: Oversize EventLogAppender record silently discarded

    also in 1 other product

    		5.3
    MediumCVE-2026-105240

    Apache log4net: NUL character truncates OutputDebugStringAppender records

    also in 1 other product

    		5.3
    MediumCVE-2026-40021

    Apache Log4net: Improper Encoding or Escaping of Output

    also in 1 other product

    		5.3

    All products by Apache Software Foundation