Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.9 before 3.5.0 - Apache log4net 02e1e115435888485f2e28b414d267e39e799e07 before dc5855a0720c91590fd7a81d729ea01fdd69e000 Description: Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL character in logged content ended the Windows Event Log record...
CVE-2026-105239: Apache log4net: NUL character truncates EventLogAppender records
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/73
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
CVE-2026-59264: Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer
Posted by Arrigo Marchiori on Nov 03 Severity: moderate Affected versions: - Apache OpenOffice through 4.1.16 Description: The Windows installers of Apache OpenOffice…
DefenderKiller: How Vulnerable Drivers Are Being Abused to Disable Endpoint Security
Table Of ContentsTable of ContentsDefenderKiller Exploits a Legacy Microsoft DriverImplications for Endpoint SecurityIndicators of Compromise and Technical ArtifactsStay…
Godot 3.x/4.x: remote crash via DTLS receive-callback heap buffer overflow
Posted by Tomasz Kaye on Oct 27 A remote denial-of-service vulnerability in Godot's DTLS networking was publicly disclosed on 2026-10-27 [1]. Affected versions: Godot…
Godot 4.x: remote client crash via multiplayer spawn packet sync_len overflow
Posted by Tomasz Kaye on Oct 27 A remote denial-of-service vulnerability in Godot 4.x multiplayer was publicly disclosed on 2026-10-27 [1]. Affected versions: Godot…
Brotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497)
Researchers have demonstrated remote code execution through CVE-2026-111497, an out-of-bounds write in Google's Brotli decoder library, and public proofs-of-concept…
The AI industry is slowly blinding itself to what its own models are thinking
Industry News, Explained The AI industry is slowly blinding itself to what its own models are thinking OpenAI and Anthropic have each separately disclosed a real…