CVE-2026-34479 | Apache Log4j 1 to Log4j 2 Bridge up to 2.25.3/3.0.0-beta2 Log4j1XmlLayout escape output

A vulnerability was found in Apache Log4j 1 to Log4j 2 Bridge up to 2.25.3/3.0.0-beta2. It has been classified as problematic. This affects an unknown function of the component Log4j1XmlLayout. The manipulation leads to escaping of output.

This vulnerability is uniquely identified as CVE-2026-34479. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.