Skip to content
Apache Log4net vulnerabilities
-
apache log4net
Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content
CVE-2026-105244
5.3 Medium
-
apache log4net
Apache log4net: Oversize EventLogAppender record silently discarded
CVE-2026-105243
5.3 Medium
-
apache log4net
Apache log4net: Request validation failure drops the event in the aspnet-request converter
CVE-2026-105242
5.3 Medium
-
apache log4net
Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch
CVE-2026-105241
5.3 Medium
-
apache log4net
Apache log4net: NUL character truncates OutputDebugStringAppender records
CVE-2026-105240
5.3 Medium
-
apache log4net
Apache log4net: NUL character truncates EventLogAppender records
CVE-2026-105239
5.3 Medium
-
apache log4net
Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters
CVE-2026-40021
Fix available
6.3 Medium
-
apache log4net, fedoraproject fedora, netapp manageability software development kit +4 more +6 more
XML External Entity attack in log4net
CVE-2018-1285
Public exploitFix available
EPSS 17.8%
9.8 Critical
-
apache log4net
Apache log4net format string vulnerability causes DoS
CVE-2006-0743
Fix available
5.0 Medium