Skip to content
feed: live about
>_ 0dayNews
Vendor

Apache

Vulnerabilities in Apache Software Foundation projects — most notably Log4j, the ubiquitous Java logging library whose Log4Shell flaw became one of the most widely exploited vulnerabilities in internet history.

CVEs
CVE-2021-44228
[ CRITICAL ] CVSS 10.0 kev

Log4Shell — Apache Log4j2 Remote Code Execution

A critical remote-code-execution vulnerability in Apache Log4j2, the ubiquitous Java logging library, allows an unauthenticated attacker to execute arbitrary code simply by getting a string they control logged — via JNDI lookup injection. One of the most widely exploited vulnerabilities in internet history due to Log4j's near-universal presence in Java applications.

Apache / Log4j2
Articles
~/articles/2026-06-30-log4shell-log4j-anniversary-explainer
Log4Shell, Explained: Why a Logging Library Became the Internet's Worst Week
Explainer
apache

Log4Shell, Explained: Why a Logging Library Became the Internet's Worst Week

CVE-2021-44228 turned a single misused feature in Apache Log4j2 — a Java logging library embedded almost everywhere — into one of the most widely exploited vulnerabilities ever recorded.

read →