log4j-web vulnerabilities (TuxCare)

2 vulnerabilities.

• log4j-web TuxCare Apache Log4j API: Improper serialization of non-finite floating-point values in MapMessage.asJson() CVE-2026-49844 Public exploitFix available 6.3 MediumJuly 10, 2026
• log4j-web TuxCare Apache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters CVE-2026-34479 Fix available 6.9 MediumApril 10, 2026