What’s Vulnerable › Products

Apache Software Foundation Apache log4net vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Apache Software Foundation Apache log4net version is affected

Latest Apache Software Foundation Apache log4net vulnerabilities

• CVE-2026-105244 — Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content (CVSS 5.3)
• CVE-2026-105243 — Apache log4net: Oversize EventLogAppender record silently discarded (CVSS 5.3)
• CVE-2026-105242 — Apache log4net: Request validation failure drops the event in the aspnet-request converter (CVSS 5.3)
• CVE-2026-105241 — Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch (CVSS 5.3)
• CVE-2026-105240 — Apache log4net: NUL character truncates OutputDebugStringAppender records (CVSS 5.3)
• CVE-2026-105239 — Apache log4net: NUL character truncates EventLogAppender records (CVSS 5.3)
• CVE-2026-40021 — Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters (CVSS 5.3)
• CVE-2018-1285 — (CVSS 9.8)
• CVE-2006-0743 — (CVSS 5.0)