PT-2026-45408 · Unknown · Logback-Core

York Shen · CVE-2026-10532 · Published 2026-06-01 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v4.0

2.9

Low

Base vector

AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:P/RE:M/U:Green

Name of the Vulnerable Software and Affected Versions logback-core versions prior to 1.5.34

Description Deserialization of untrusted data in the HardenedObjectInputStream module allows for Object Injection, although the impact is heavily restricted. An attacker capable of influencing serialized data sent to the 'SimpleSocketServer' or 'SimpleSSLSocketServer' endpoints can instantiate Proxy objects. This issue represents a bypass of intended security restrictions, though no practical method for remote code execution or significant privilege escalation has been identified.

Recommendations Update to a version later than 1.5.33.

Exploit

Fix

LPE

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CLEANSTART-2026-WT54034

CVE-2026-10532

GHSA-JHQ6-GFMJ-V8FX

OPENSUSE-SU-2026:10999-1

Affected Products

Logback-Core

References · 98

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10532.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-54399 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-10532 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33871 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-54516 · Security Note
• https://osv.dev/vulnerability/CVE-2026-10532 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jhq6-gfmj-v8fx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-54514 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-9828 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-5588 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-54517 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-10532 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33870 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-54513 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-8671 · Security Note