Lucene search
K

Arbitrary Code Execution

🗓️ 21 Feb 2026 05:02:01Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 2 Views

Logback-core permits code execution via unsafe config parsing by attackers with write access.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Input Validation in QOS.CH logback-core [CVE-2026-1225]
27 Feb 202615:43
ibm
IBM Security Bulletins
Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the logback-core library that could allow denial-of-service through specially crafted inputs (CVE-2026-1225).
27 Mar 202600:57
ibm
IBM Security Bulletins
Security Bulletin: A logback-core-1.5.18.jar vulnerability found by Scanner affects IBM Rational Functional Tester / DevOps Test UI
25 May 202616:49
ibm
IBM Security Bulletins
Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.
27 Apr 202607:44
ibm
IBM Security Bulletins
Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
6 Apr 202610:00
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in logback-core-1.3.14.jar affects IBM DevOps Code ClearCase [CVE-2024-12798, CVE-2024-12801, CVE-2025-11226,CVE-2026-1225]
10 Mar 202605:12
ibm
IBM Security Bulletins
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for February 2026
26 Feb 202609:40
ibm
IBM Security Bulletins
Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses logback-core-1.5.21.jar which is vulnerable to CVE-2026-1225
5 May 202609:41
ibm
IBM Security Bulletins
Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the logback-core library
10 Apr 202612:55
ibm
IBM Security Bulletins
Security Bulletin:ACE Vulnerability in QOS.CH Logback-core 1.5.24: Class Instantiation via Compromised Configuration File
4 May 202612:51
ibm
Rows per page
Vulners
Node
ch.qos.logbacklogback-coreRange0.9.201.5.24java
OROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROR
ch.qos.logbacklogback-coreMatch1.2.4-groovylessjava
OROROROROROROR
ch.qos.logbacklogback-coreMatch1.3.0-alpha0java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha1java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha10java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha11java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha12java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha13java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha14java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha15java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha16java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha2java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha3java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha4java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha5java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha6java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha7java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha8java
OR
ch.qos.logbacklogback-coreMatch1.3.0-alpha9java
OR
ch.qos.logbacklogback-coreMatch1.3.0-beta0java
OROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROR

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 May 2026 05:15Current
5.9Medium risk
Vulners AI Score5.9
CVSS 41.8
EPSS0.00014
SSVC
2