Apache Software Foundation Log4net vulnerabilities

• apache log4net Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content CVE-2026-105244 5.3 MediumOctober 6, 2026
• apache log4net Apache log4net: Oversize EventLogAppender record silently discarded CVE-2026-105243 5.3 MediumOctober 6, 2026
• apache log4net Apache log4net: Request validation failure drops the event in the aspnet-request converter CVE-2026-105242 5.3 MediumOctober 6, 2026
• apache log4net Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch CVE-2026-105241 5.3 MediumOctober 6, 2026
• apache log4net Apache log4net: NUL character truncates OutputDebugStringAppender records CVE-2026-105240 5.3 MediumOctober 6, 2026
• apache log4net Apache log4net: NUL character truncates EventLogAppender records CVE-2026-105239 5.3 MediumOctober 6, 2026
• apache log4net Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters CVE-2026-40021 Fix available 6.3 MediumApril 10, 2026
• apache log4net, fedoraproject fedora, netapp manageability software development kit +4 more +6 more XML External Entity attack in log4net CVE-2018-1285 Public exploitFix available EPSS 17.8% 9.8 CriticalMay 11, 2020