Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 15:29:23 +0000 CVE-2026-40023 — Apache Log4cxx, Apache Log4cxx (Conan), Apache Log4cxx (Brew): Silent log event loss in XMLLayout due to unescaped XML… https://cve.radiocsirt.org/vuln/cve-2026-40023 <p><strong>Affected:</strong> Apache Software Foundation Apache Log4cxx, Apache Software Foundation Apache Log4cxx (Conan), Apache Software Foundation Apache Log4cxx (Brew)</p> <p>Apache Log4cxx&#39;s XMLLayout https://logging.apache.org/log4cxx/1.7.0/classlog4cxx_1_1xml_1_1XMLLayout.html , in versions before 1.7.0, fails to sanitize characters forbidden by the XML 1.0 specification https://www.w3.org/TR/xml/#charsets in log messages, NDC, and MDC property keys and values, producing invalid XML output. Conforming XML parsers must reject such documents with a fatal error, which may cause downstream log processing systems to drop or fail to index affected records.</p> <p>An attacker who can influence logged data can exploit this to suppress individual log records, impairing audit trails and detection of malicious activity.</p> <p>Users are advised to upgrade to Apache Log4cxx 1.7.0, which fixes this issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Log4cxx, Apache Software Foundation Apache Log4cxx (Conan), Apache Software Foundation Apache Log4cxx (Brew)</p> <p>Apache Log4cxx&#39;s XMLLayout https://logging.apache.org/log4cxx/1.7.0/classlog4cxx_1_1xml_1_1XMLLayout.html , in versions before 1.7.0, fails to sanitize characters forbidden by the XML 1.0 specification https://www.w3.org/TR/xml/#charsets in log messages, NDC, and MDC property keys and values, producing invalid XML output. Conforming XML parsers must reject such documents with a fatal error, which may cause downstream log processing systems to drop or fail to index affected records.</p> <p>An attacker who can influence logged data can exploit this to suppress individual log records, impairing audit trails and detection of malicious activity.</p> <p>Users are advised to upgrade to Apache Log4cxx 1.7.0, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/cve-2026-40023