[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyBrM1Wm4l1vmcMsO2joGc55pDxisjS6e8zY3HdipJfo":3,"g5a-risk:CVE-2026-105243":121},{"success":4,"data":5,"meta":118},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":26,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":41,"references":42,"referencesCount":62,"weaknesses":63,"weaknessesCount":41,"isActivelyExploited":72,"cisaInfo":26,"otxData":26,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":109,"notableEvents":110},"CVE-2026-105243","What is CVE-2026-105243?","Insufficient Logging vulnerability in the EventLogAppender of Apache log4net.\n\nLong messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and reported nothing. A party whose data reaches a log message could suppress the whole record by making it long enough. Only applications on Windows that use EventLogAppender are affected.\n\nThis issue affects Apache log4net: from 1.2.9 before 3.5.0.\n\nUsers are recommended to upgrade to version 3.5.0, which fixes the issue.","Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Even...","2026-10-06T20:17:16.167","2026-10-09T15:26:03.43",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":31},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"security@apache.org","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,[],[],[],0.00806,[32,32,32,32,32,32,32],"Medium",[36],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"apache","log4net","*","cpe:2.3:a:apache:log4net:*:*:*:*:*:*:*:*",1,[43,48,51,57],{"url":44,"source":45,"tags":46},"https:\u002F\u002Fgithub.com\u002Fapache\u002Flogging-log4net\u002Fcommit\u002F28fbfb25678c48a8cc5bc9b94ead0dddfc39ffed","GitHub",[47],"Patch",{"url":49,"source":45,"tags":50},"https:\u002F\u002Fgithub.com\u002Fapache\u002Flogging-log4net\u002Fpull\u002F315",[47],{"url":52,"source":53,"tags":54},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fjr6fj5skv1vnjbc9jmt8bp151p8ow1rp","Apache",[55,56],"Mailing List","Vendor Advisory",{"url":58,"source":59,"tags":60},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F10\u002F07\u002F17","Openwall",[55,61],"Third Party Advisory",4,[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-778","Insufficient Logging","When a security-critical event occurs, the product either does not record the event or omits important details about the event when logging it.","When security-critical events are not logged properly, such as a failed login attempt, this can make malicious behavior more difficult to detect and may hinder forensic analysis after an attack succeeds.\nAs organizations adopt cloud storage resources, these technologies often require configuration changes to enable detailed logging information, since detailed logging can incur additional costs. This could lead to telemetry gaps in critical audit logs. For example, in Azure, the default value for logging is disabled.","Draft","Base","Simple",false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2026-105243? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2026-105243, a medium severity cyber security vulnerability from 2026. Insufficient Logging vulnerability in the EventLogAppend...","CVE-2026-105243, CVE-2026-105243 vulnerability, CVE-2026-105243 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, apache security, log4net vulnerability","\u002Fwhat-is\u002Fcve-2026-105243",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2026-105243","Cybersecurity","CVE-2026-105243, CVE-2026-105243 vulnerability, CVE-2026-105243 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":26,"Negate":26,"Nodes":101},[102],{"Operator":103,"Negate":72,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":106,"VersionStartExcluding":26,"VersionStartIncluding":107,"VersionEndExcluding":108,"VersionEndIncluding":26},"182F45E2-D20D-4B67-85C1-AFE1D39A5692","1.2.9","3.5.0",[],[111],{"id":112,"eventType":113,"eventTime":114,"details":115,"label":116,"color":117},"c8247b4a-6c65-4ce0-acb9-a688b7865229","NEW_NVD","2026-10-07T04:02:49.537747+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":119,"version":120},1792347699135,"2.0",{"score":122,"band":123,"action":124,"scoredAt":125},30,"Low","Monitor","2026-10-16T07:18:33.060176+00:00"]