Advisories · Technology

Apache Software Foundation Apache Log4cxx (Conan).

Every CVE that names Apache Software Foundation Apache Log4cxx (Conan) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-40023 CVE record

CVSS 6.3 Medium

Apache Log4cxx, Apache Log4cxx (Conan), Apache Log4cxx (Brew): Silent log event loss in XMLLayout due to unescaped XML 1.0 forbidden characters
- Apache Software Foundation Apache Log4cxx
- Apache Software Foundation Apache Log4cxx (Conan)
- CWE-116
Not analysed yet 10 Apr 2026