CVE-2026-34478 - Apache Log4j Core: Log injection in Rfc5424Layout due to silent configuration incompatibility
CVE ID :CVE-2026-34478
Published : April 10, 2026, 3:40 p.m. | 26 minutes ago
Description :Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424...
Related Vulnerabilities
- CVE-2026-5207: The LifterLMS plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all v MEDIUM
- CVE-2026-36233: A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Onl CRITICAL
- CVE-2026-5985: A security flaw has been discovered in code-projects Simple IT Discussion Forum 1.0. The affected el MEDIUM
- CVE-2026-34477: The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete: i MEDIUM
- CVE-2026-34500: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled a MEDIUM
Related Coverage
Threat Actors