CVE-2026-19880 - Incomplete protection against CVE-2025-11226
Brief
CVE ID : CVE-2026-19880
Published : Aug. 14, 2026, 2:31 p. m.
- 35 minutes ago
Description : Path-traversal vulnerability in QOS. CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value (e. g. via an HTTP header) create and append log files outside the intended directory.
This issue affects Logback-classic: from 0.
- 14 through 1.
- 2.
Severity: 6.3
- MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...