CVE-2026-49844 | Apache Log4j API up to 2.25.4/2.26.0 MapMessage MapMessage.asJson encoding error

July 10, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Apache Log4j API up to 2.25.4/2.26.0. Affected is the function MapMessage.asJson of the component MapMessage. The manipulation leads to encoding error.

This vulnerability is documented as CVE-2026-49844. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More