As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-105243: Apache log4net: Oversize EventLogAppender record silently discarded
CVE-2026-105243 is an insufficient logging vulnerability in Apache log4net's EventLogAppender where long messages exceeding Windows Event Log limits are silently discarded instead of being truncated properly. The flaw affects versions 1.2.9 through 3.4.x and is rated moderate severity with a CVSS score of 5.3.
Why it matters: Organizations using Apache log4net 1.2.9 before 3.5.0 for event logging face potential loss of audit and diagnostic data when messages exceed Windows Event Log size constraints, affecting security monitoring and compliance evidence.
- Source published
- First seen by Cybersecurity Tracker