CVE-2025-11226 | QOS Logback-core up to 1.5.18 Environment Variable input validation

October 1, 2025 Yanac

A vulnerability labeled as problematic has been found in QOS Logback-core up to 1.5.18. The impacted element is an unknown function of the component Environment Variable Handler. Executing manipulation can lead to improper input validation.

This vulnerability is handled as CVE-2025-11226. It is possible to launch the attack on the local host. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More