Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout , in versions 2.21.0 through 2.25.3, is vulnerable to log injection via CRLF sequences due to undocumented renames of security-relevant configuration attributes. Two distinct issues affect users of stream-based syslog services who configure Rfc5424Layout directly: * The newLineEscape attribute was silently renamed, causing newline escaping to stop working for users of TCP framing (RFC 6587), exposing them to CRLF injection in log output. * The useTlsMessageFormat attribute was silently renamed, causing users of TLS framing (RFC 5425) to be silently downgraded to unframed TCP (RFC 6587), without newline escaping. Users of the SyslogAppender are not affected, as its configuration attributes were not modified. Users are advised to upgrade to Apache Log4j Core 2.25.4, which corrects this issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-11 | 1 | General1 |
| 2026-06-25 | 1 | Patch1 |
| 2026-08-11 | 1 | Patch1 |
Arcserve Backup の新規サポート技術情報です🌟 Arcserve Backup 19 | Vulnerability | CVE-2026-34477, CVE-2026-34480, CVE-2025-68161, CVE-2026-34478, and CVE-2026-49844 https://support.arcserve.com/s/article/KB000011092?language=ja
Post summary
The post lists five CVEs related to Arcserve Backup 19 and links to a support article, but it does not provide details on exploits, patches, or technical aspects of the vulnerabilities.
Urgent: Recent #Cybersecurity flaws impacting data in transit. Apache Log4j TLS bypass (CVE-2026-34478) allows MITM. Cisco SD-WAN zero-day (CVE-2026-20245) grants root, exposing traffic. Patch now! #Vulnerabilities #News
Post summary
Two critical vulnerabilities—Apache Log4j TLS bypass (CVE-2026-34478) enabling MITM and Cisco SD-WAN zero-day (CVE-2026-20245) granting root—have been disclosed, and patches are now available.
CVE-2026-34478 Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout , in versions 2.21.0 through 2.25.3, is vulnerable to log in… https://www.cve.org/CVERecord?id=CVE-2026-34478
Post summary
The entry notes CVE‑2026‑34478 affecting Log4j Core's Rfc5424Layout in specific versions, but provides no further details on the vulnerability, exploitation, or remediation.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | log4j | - | - | - |
| App | apache | log4j | 3.0.0 | - | - |
| App | apache | log4j | 3.0.0 | - | - |
| App | apache | log4j | 3.0.0 | - | - |