EUVD-2026-38691

🗓️ 24 Jun 2026 05:41:32Reported by EUVDType

ACE vulnerability in logback-core up to 1.5.34 enables code execution via compromised config.

Reporter	Title	Published	Views	Family All 73
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains a vulnerability related to use os qOS.ch Logback-core	16 Apr 202614:40	–	ibm
IBM Security Bulletins	Security Bulletin: A logback-core-1.5.18.jar vulnerability found by Scanner affects IBM Rational Functional Tester / DevOps Test UI	25 May 202616:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses logback-core which is vulnerable to CVE-2025-11226	10 Feb 202610:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	6 Feb 202617:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.1.0	5 Dec 202509:12	–	ibm
IBM Security Bulletins	Security Bulletin: Arbitrary Code Execution in Logback-Core via Conditional Configuration Processing, affects watsonx.data	2 Feb 202606:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the logback-core library that could lead to denial-of-service under specific conditions (CVE-2025-11226).	27 Mar 202600:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM StreamSets Data Collector	9 Mar 202621:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.	29 Dec 202505:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Software	19 Jun 202617:23	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "d17c8d30-d021-361e-a67d-77feb08a477a",
        "vendor": {
          "name": "QOS.CH Sarl"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "808441a3-3e59-31cf-af4a-1b788f1fee21",
        "product": {
          "name": "Logback-core",
          "vendor": {
            "name": "QOS.CH Sarl"
          }
        },
        "product_version": "0.9.20 ≤1.5.134"
      }
    ]
  }
]

Source	Link
logback	www.logback.qos.ch/news.html

24 Jun 2026 05:41Current

6.2Medium risk

Vulners AI Score6.2

CVSS 47

EPSS0.00151

SSVC