[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fC4L2SbhPazriuuK4jyHoI4ytrG-Q7iDMDmyJIH5f8qc":3,"g5a-risk:CVE-2026-105240":121},{"success":4,"data":5,"meta":118},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":26,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":41,"references":42,"referencesCount":62,"weaknesses":63,"weaknessesCount":41,"isActivelyExploited":72,"cisaInfo":26,"otxData":26,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":109,"notableEvents":110},"CVE-2026-105240","What is CVE-2026-105240?","Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net.\n\nA NUL character in logged content ended the debug output record at that point, so everything the layout rendered after it, including exception text and trailing fields, was silently lost. A party whose data reaches a log message could hide the rest of that record. Only applications on Windows that use OutputDebugStringAppender are affected.\n\nThis issue affects Apache log4net: from 1.2.9 before 3.5.0.\n\nUsers are recommended to upgrade to version 3.5.0, which fixes the issue.","Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net. A NUL character in logged content end...","2026-10-06T20:17:15.777","2026-10-09T15:41:47.25",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":31},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"security@apache.org","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,[],[],[],0.00806,[32,32,32,32,32,32,32],"Medium",[36],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"apache","log4net","*","cpe:2.3:a:apache:log4net:*:*:*:*:*:*:*:*",1,[43,48,51,57],{"url":44,"source":45,"tags":46},"https:\u002F\u002Fgithub.com\u002Fapache\u002Flogging-log4net\u002Fcommit\u002F6046fe9d7f353b49fe995361c071ec2eea8f7ef6","GitHub",[47],"Patch",{"url":49,"source":45,"tags":50},"https:\u002F\u002Fgithub.com\u002Fapache\u002Flogging-log4net\u002Fpull\u002F315",[47],{"url":52,"source":53,"tags":54},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fgyw2d4ppy82t1vlpdknkfd1nmzp21z17","Apache",[55,56],"Mailing List","Vendor Advisory",{"url":58,"source":59,"tags":60},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F10\u002F07\u002F18","Openwall",[55,61],"Third Party Advisory",4,[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-158","Improper Neutralization of Null Byte or NUL Character","The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes NUL characters or null bytes when they are sent to a downstream component.","As data is parsed, an injected NUL character or null byte may cause the product to believe the input is terminated earlier than it actually is, or otherwise cause the input to be misinterpreted. This could then be used to inject potentially dangerous input that occurs after the null byte or otherwise bypass validation routines and other protection mechanisms.","Incomplete","Variant","Simple",false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2026-105240? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2026-105240, a medium severity cyber security vulnerability from 2026. Improper Neutralization of Null Byte or NUL Character vu...","CVE-2026-105240, CVE-2026-105240 vulnerability, CVE-2026-105240 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, apache security, log4net vulnerability","\u002Fwhat-is\u002Fcve-2026-105240",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2026-105240","Cybersecurity","CVE-2026-105240, CVE-2026-105240 vulnerability, CVE-2026-105240 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":26,"Negate":26,"Nodes":101},[102],{"Operator":103,"Negate":72,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":106,"VersionStartExcluding":26,"VersionStartIncluding":107,"VersionEndExcluding":108,"VersionEndIncluding":26},"182F45E2-D20D-4B67-85C1-AFE1D39A5692","1.2.9","3.5.0",[],[111],{"id":112,"eventType":113,"eventTime":114,"details":115,"label":116,"color":117},"f3524b31-c3ea-4e27-a69c-c9fdf04f98ff","NEW_NVD","2026-10-07T04:02:49.537747+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":119,"version":120},1792348121197,"2.0",{"score":122,"band":123,"action":124,"scoredAt":125},23,"Low","Monitor","2026-10-16T07:18:33.059105+00:00"]