cbcvebase.

Apache Software Foundation Apache Log4Net vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_log4net.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2026-40021P4MEDIUMCVSS 5.3fixed in 3.3.02026-04-10
CVE-2026-40021 [MEDIUM] CWE-116 CVE-2026-40021: Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layouts.html#lay Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layouts.html#layout-list and XmlLayoutSchemaLog4J https://logging.apache.org/log4net/manual/configuration/layouts.html#layout-list , in versions before 3.3.0, fail to sanitize characters forbidden by the XML 1.0 specification https://www.w3.org/TR/xml/#charsets in MDC
nvd
Apache Software Foundation Apache Log4Net vulnerabilities | cvebase