Security Bulletin: IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Operational Decision Manager Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values during MapMessage JSON...

log4j-recognizer

log4j-recognizer A utility to look for log4j in the currently running JVM CVE-2021-44228 Log4Shell. This is useful for systems that allow plugins to introduce their own jars. Therefore, you can find if someone brought log4j in a dangerous version. Usage Just instantiate Log4jRecognizer with your...

log4j-fuzzer

log4j-fuzzer For Single Target root@kitploit: chmod +x log4j After That Command Simply Put Your Target root@kitploit: ./log4j YOURTARGETURL YOURREMOTESERVER For Multiple Target Gether All Domain, Subdomain, Directroty in a list After That Simply Command This root@kitploit: chmod +x log4j You Can...

log4shellwithlog4j2_13_3

log4shellwithlog4j2133 Springboot web application accepts a name get parameter and logs its value to log4j2. Vulnerable to CVE-2021-44228. build the Springboot vulnerable application with mvn clean install run the Springboot application with the k2 agent with java --add-modules java.sql...

Log-4j-scanner

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...

4jfinder.github.io

Searchable Log4j database Searchable page for CISA Log4j CVE-2021-44228 Affected Vendor & Software List, maintained by the US Cybersecurity and Infrastructure Security Agency CISA. How to use Download the index.html and cisalist.css files and run from your local computer. Hosted version at...

log4j2-vulnerable-spring-app

Aplicación de muestra de prueba para Log4j 2 CVE-2021-44228 Basada en spring-boot-starter-log4j2:2.6.1 log4j 2.14.1 Endpoints disponibles...

CLSA-2026-1788215347 TuxCare security update for org.apache.logging.log4j (7 CVEs)

TuxCare rebuilt 23 org.apache.logging.log4j packages to address 7 CVEs. Fixed in 2.11.0-tuxcare.1...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: avalon-framework (UTSA-2026-093010)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093010 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: avalon-logkit (UTSA-2026-093012)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093012 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: wildfly-security-manager (UTSA-2026-030642)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-030642 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: datanucleus-api-jdo (UTSA-2026-093015)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093015 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wildfly-elytron (UTSA-2026-031644)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031644 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wildfly-common (UTSA-2026-093013)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093013 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: jboss-logging (UTSA-2026-031578)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031578 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: datanucleus-rdbms (UTSA-2026-093033)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093033 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032291)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032291 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: HikariCP (UTSA-2026-093034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093034 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: jgroups (UTSA-2026-031601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031601 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: infinispan (UTSA-2026-093035)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093035 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...