CVE-2026-1225 | QOS Logback-core up to 1.5.24 Configuration File information disclosure

January 22, 2026 Yanac

A vulnerability labeled as problematic has been found in QOS Logback-core up to 1.5.24. Affected by this issue is some unknown functionality of the component Configuration File Handler. Executing a manipulation can lead to information disclosure.

This vulnerability is registered as CVE-2026-1225. The attack needs to be launched locally. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More