CVE-2026-19880

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...

DEBIAN-CVE-2026-19880

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...

CVE-2026-19880

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...

UBUNTU-CVE-2026-19880

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...

CVE-2026-19880

CVE-2026-19880 affects Logback-classic (Java) with a path-traversal flaw where an MDC discriminator value flows into a nested FileAppender path, enabling log file creation outside the intended directory. Affected versions: 0.9.14 through 1.6.2. Per linked advisories, the recommended remediation i...

EUVD-2026-58667

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...

CVE-2026-19880 Incomplete protection against CVE-2025-11226

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...

CVE-2026-19880

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...

CVE-2026-19880

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...

CVE-2026-19880 Incomplete protection against CVE-2025-11226

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...

PT-2026-72028

Name of the Vulnerable Software and Affected Versions Logback-classic versions 0.9.14 through 1.6.2 Description A path-traversal issue exists in the logback-classic module. An MDC-based discriminator value is passed unsanitized into a nested FileAppender path. This allows an attacker who can...

CVE-2026-19880: Improper Limitation of a Pathname to a Restricted Directory

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway Desktop Edition.

Summary Multiple vulnerabilities have been found in CICS Transaction Gateway Desktop Edition due to the use of Apache Tomcat Embed, Spring Web MVC, Spring Boot, Spring Core, Spring Context, SnakeYAML, Spring Beans, Logback Classic and Logback Core. The Apache Tomcat Embed, Spring Web MVC, Spring...

ROOT-APP-MAVEN-CVE-2017-5929 CVE-2017-5929 in io.root.ch.qos.logback:logback-classic - Patched by Root

Root has patched CVE-2017-5929 in the io.root.ch.qos.logback:logback-classic package for Root:Maven. Multiple fixed versions available...

ch.qos.logback:log4j-bridge (0.7.1), ch.qos.logback:logback-access (0.7.1) +2 more potentially affected by CVE-2026-10532 via ch.qos.logback:logback-core (0.7.1)

ch.qos.logback:logback-core MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.7.1 - ch.qos.logback:logback-access 0.7.1 - ch.qos.logback:logback-classic...

ch.qos.logback:logback-access (0.9.28), ch.qos.logback:logback-classic (0.9.28) +113 more potentially affected by CVE-2026-10532 via ch.qos.logback:logback-core (0.9.28)

ch.qos.logback:logback-core MAVEN version 0.9.28 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.28 - ch.qos.logback:logback-classic 0.9.28 -...

ch.qos.logback:log4j-bridge (0.9.7), ch.qos.logback:logback-access (0.9.7) +3 more potentially affected by CVE-2026-10532 via ch.qos.logback:logback-core (0.9.7)

ch.qos.logback:logback-core MAVEN version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.7 - ch.qos.logback:logback-access 0.9.7 - ch.qos.logback:logback-classic...

ch.qos.logback:logback-access (0.9.23), ch.qos.logback:logback-classic (0.9.23) +1 more potentially affected by CVE-2026-10532 via ch.qos.logback:logback-core (0.9.23)

ch.qos.logback:logback-core MAVEN version 0.9.23 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.23 - ch.qos.logback:logback-classic 0.9.23 -...

ch.qos.logback:logback-access (0.9.13), ch.qos.logback:logback-classic (0.9.13) +1 more potentially affected by CVE-2026-10532 via ch.qos.logback:logback-core (0.9.13)

ch.qos.logback:logback-core MAVEN version 0.9.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.13 - ch.qos.logback:logback-classic 0.9.13 -...

ch.qos.logback:logback-access (>=${parent.version}, <=0.2.5), ch.qos.logback:logback-classic (0.2.5) potentially affected by CVE-2026-10532 via ch.qos.logback:logback-core (0.2.5)

ch.qos.logback:logback-core MAVEN version 0.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access =$parent.version, =0.2.5 - ch.qos.logback:logback-classic 0.2.5 Source cves...