CYBERSECURITYTRACKER
Permanent story citation

CVE-2026-105244: Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9577

As cited

Copy frozen at (site build).

vulnerabilities

CVE-2026-105244: Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content

Apache log4net versions before 3.5.0 contain an improper output encoding vulnerability in RemoteSyslogAppender that silently removes non-ASCII characters from log records. This behavior can result in data loss and incorrect log content sent to syslog servers.

Why it matters: Organizations using log4net with RemoteSyslogAppender for centralized logging are at risk of losing critical information in non-ASCII characters, potentially obscuring security events or operational issues in logs that should inform incident response and compliance investigations.

CVEsCVE-2026-105244
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary