https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:29:19.181576+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01050 bdu:2021-01050 2026-10-03T06:29:19.191559+00:00 bdu:2021-01050 https://cve.radiocsirt.org/vuln/certfr-2022-avi-090 certfr-2022-avi-090 — De multiples vulnérabilités ont été découvertes dans Foxit PDF Reader et Foxit PDF Editor. Certaines d'entre elles perm… 2026-10-03T06:29:19.191591+00:00 certfr-2022-avi-090 https://cve.radiocsirt.org/vuln/cnvd-2020-32847 cnvd-2020-32847 2026-10-03T06:29:19.191609+00:00 cnvd-2020-32847 https://cve.radiocsirt.org/vuln/euvd-2026-61121 EUVD-2026-61121 2026-10-03T06:29:19.191621+00:00 EUVD-2026-61121 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1285 fkie_cve-2018-1285 2026-10-03T06:29:19.191631+00:00

Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.

 https://cve.radiocsirt.org/vuln/ghsa-2cwj-8chv-9pp9 GHSA-2cwj-8chv-9pp9 — XML External Entity attack in log4net 2026-10-03T06:29:19.191656+00:00

Affected: NuGet: log4net

Apache log4net before 2.0.10 does not disable XML external entities when parsing log4net configuration files. This could allow for XXE-based attacks in applications that accept arbitrary configuration files from users.

 https://cve.radiocsirt.org/vuln/gsd-2018-1285 gsd-2018-1285 2026-10-03T06:29:19.191677+00:00 gsd-2018-1285 https://cve.radiocsirt.org/vuln/icsa-24-226-02 ICSA-24-226-02 — Rockwell Automation AADvance Standalone OPC-DA Server 2026-10-03T06:29:19.191687+00:00

An arbitrary code execution vulnerability exists in the affected product. The log4net config file does not disable XML external entities. An arbitrary code execution vulnerability exists in the affected product. The vulnerability occurs due to a vulnerable component, the format string in log4net.

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12311-1 openSUSE-SU-2024:12311-1 — log4net-1.2.10-78.1 on GA media 2026-10-03T06:29:19.191704+00:00

log4net-1.2.10-78.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1285 UBUNTU-CVE-2018-1285 2026-10-03T06:29:19.191718+00:00

Affected: Ubuntu:16.04:LTS: log4net, Ubuntu:18.04:LTS: log4net, Ubuntu:20.04:LTS: log4net, Ubuntu:22.04:LTS: log4net

Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.

 https://cve.radiocsirt.org/vuln/vde-2021-041 VDE-2021-041 — Pepperl+Fuchs: Multiple DTM and VisuNet Software affected by log4net vulnerability 2026-10-03T06:29:19.191739+00:00

Critical vulnerabilities have been discovered in the utilized component log4net by Apache Software Foundation.

UPDATE A: Remediation: added fixed VisuNet Products

 https://cve.radiocsirt.org/vuln/vde-2024-004 VDE-2024-004 — TRUMPF: Multiple products affected by log4net vulnerability 2026-10-03T06:29:19.191755+00:00

Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.