Apache Software Foundation Apache Log4j Core

• CVE-2026-34480 Medium 6.9 Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters 1.0%
• CVE-2026-34478 Medium 6.9 Apache Log4j Core: Log injection in Rfc5424Layout due to silent configuration incompatibility 1.0%
• CVE-2026-34477 Medium 6.3 Apache Log4j Core: verifyHostName attribute silently ignored in TLS configuration, allowing hostname verification bypass 0.6%
• CVE-2025-68161 Medium 6.3 Apache Log4j Core: Missing TLS hostname verification in Socket appender 0.8%