Improper input validation in Qos.ch Sarl Logback-core
CVE-2026-13006
ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.36 in Java applications, allows an attacker to execute arbitrary code circumventing existing protections against CVE-202…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.001 (2.4th percentile) — read the EPSS interpretation.
Affected products
- Qos.ch Sarl Logback-core — versions 1.5.35, 1.5.37, 0.9.20