As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-105242: Apache log4net: Request validation failure drops the event in the aspnet-request converter
CVE-2026-105242 is an improper handling of exceptional conditions vulnerability in Apache log4net's aspnet-request pattern converter that causes request validation failures to drop logging events. The vulnerability affects log4net versions before 3.5.0 and carries a CVSS 3.1 score of 5.3 (medium), with network-accessible attack surface and no authentication required.
Why it matters: Organizations using Apache log4net versions prior to 3.5.0 need to patch to prevent integrity impacts from dropped events during request validation failures, which may mask or lose critical log data in ASP.NET applications.
- Source published
- First seen by Cybersecurity Tracker