Advisories · Technology

Apache Software Foundation Apache log4net.

Every CVE that names Apache Software Foundation Apache log4net among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-105244 CVE record

CVSS 5.3 Medium

Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content
- Apache Software Foundation Apache log4net
- CWE-116
Not analysed yet 6 Oct 2026
CVE-2026-105243 CVE record

CVSS 5.3 Medium

Apache log4net: Oversize EventLogAppender record silently discarded
- Apache Software Foundation Apache log4net
- CWE-778
Not analysed yet 6 Oct 2026
CVE-2026-105242 CVE record

CVSS 5.3 Medium

Apache log4net: Request validation failure drops the event in the aspnet-request converter
- Apache Software Foundation Apache log4net
- CWE-755
Not analysed yet 6 Oct 2026
CVE-2026-105241 CVE record

CVSS 5.3 Medium

Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch
- Apache Software Foundation Apache log4net
- CWE-176
Not analysed yet 6 Oct 2026
CVE-2026-105240 CVE record

CVSS 5.3 Medium

Apache log4net: NUL character truncates OutputDebugStringAppender records
- Apache Software Foundation Apache log4net
- CWE-158
Not analysed yet 6 Oct 2026
CVE-2026-105239 CVE record

CVSS 5.3 Medium

Apache log4net: NUL character truncates EventLogAppender records
- Apache Software Foundation Apache log4net
- CWE-158
Not analysed yet 6 Oct 2026