CVE-2026-34477

🗓️ 10 Apr 2026 15:36:19Reported by MendType

Log4j Core allows man-in-the-middle attacks via Ssl element host name ignore.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Tivoli Netcool/OMNIbus_GUI	26 May 202614:03	–	ibm
IBM Security Bulletins	Security Bulletin: due to the use of Apache Log4j, IBM Transformation Extender Advanced is vulnerable to hostname verification bypass and log injection via CRLF sequences	7 Aug 202607:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j	31 Jul 202608:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in log4j/2.x affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple log4j related security vulnerabilities in IBM Guardium Key Lifecycle Manager	13 Jul 202609:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities	2 Sep 202601:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Log4j	6 Aug 202618:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Tivoli Netcool Impact 7.1.1.0	1 Jul 202619:41	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Apache Log4j	1 Jul 202605:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affects IBM Data Studio Client 4.2.2	19 May 202606:38	–	ibm

Vulners

Node

apache log4j-coreRange2.12.0–2.25.4

Source	Link
logging	www.logging.apache.org/log4j/2.x/manual/appenders/network.html
github	www.github.com/apache/logging-log4j2
repo	www.repo.maven.apache.org/maven2
seclists	www.seclists.org/oss-sec/2026/q2/89
logging	www.logging.apache.org/security.html
github	www.github.com/apache/logging-log4j2/pull/4075
lists	www.lists.apache.org/thread/lkx8cl46t2bvkcwfcb2pd43ygc097lq4
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34477.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34477
logging	www.logging.apache.org/cyclonedx/vdr.xml

07 Oct 2026 22:48Current

6Medium risk

Vulners AI Score6

CVSS 3.14 - 5.9

CVSS 46.3

EPSS0.00767

SSVC