Log in Start free

QOS.CH Sarl

Products

ProductCVEsExploitedLatest
logback5–Jun 1, 2026
Logback-core4–Jun 24, 2026
Logback-classic2–Oct 2, 2026

Exploited and recent CVEs

  • CVE-2026-104721 Medium 6.3 Logback: Incomplete protection against CVE-2026-19880 0.3%
  • CVE-2026-19880 Medium 6.3 Incomplete protection against CVE-2025-11226 0.3%
  • CVE-2026-13006 High 7.0 Incomplete protection against CVE-2025-11226 0.2%
  • CVE-2026-10532 Low 2.9 Logback deserialization whitelist bypass for Proxy objects 0.4%
  • CVE-2026-9828 Low 2.9 Logback deserialization whitelist bypass for java.lang and java.util 0.4%
  • CVE-2026-1225 Low 1.8 Malicious logback.xml configuration file allows instantiation of arbitrary classes 0.2%
  • CVE-2025-11226 High 7.0 Conditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino 0.2%
  • CVE-2024-12801 Low 2.4 SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks 0.2%
  • CVE-2024-12798 Medium 5.9 JaninoEventEvaluator vulnerability 0.5%
  • CVE-2023-6481 High 7.1 Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix 0.7%
  • CVE-2023-6378 High 7.1 Logback "receiver" DOS vulnerability 0.9%