Vulnerabilities & PatchesEmerging1 src
CVE-2026-19880 - Incomplete protection against CVE-2025-11226
CVE ID : CVE-2026-19880
Published : Aug. 14, 2026, 2:31 p. m.
• 35 minutes ago
Description : Path-traversal vulnerability in QOS. CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value (e. g. via an HTTP header) create and append log files outside the intended directory.
This issue affects Logback-classic: from 0. 9. 14 through 1. 6. 2.
Severity: 6.3
• MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...