Skip to content
OpenAdvisories

Product · QOS.CH Sarl

Logback-core

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.0
    CVE-2026-13006

    Incomplete protection against CVE-2025-11226

    ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.36 in Java applications, allows an attacker to execute arbitrary code circumventing existing protections against CVE-2025-11226 by compromisi…

    QOS.CH Sarl Logback-core logback logback Debian Ubuntu
  • High 7.0
    CVE-2025-11226

    Conditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino

    ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting …

    QOS.CH Sarl Logback-core thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven