CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← Back to feed

CVE-2025-68161

highcovered by 15 sourcesfirst seen 2026-07-03

A remote, anonymous attacker can exploit a vulnerability in Apache log4j to disclose information.

CSIRTS triage

vendor: Apache product: log4j Information disclosure

What: A vulnerability in Apache log4j allows a remote, anonymous attacker to disclose information.
Who is affected: Apache log4j deployments are affected by this vulnerability.
Urgency: Remediation is low urgency due to the low severity of the information disclosure.
Action: Update to the latest version of Apache log4j to address this vulnerability.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2025-68161

Get an email if CVE-2025-68161 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.82% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 54% of all EPSS-scored CVEs.

Advisory coverage (15)

unknownMultiple vulnerabilities in Oracle MySQL (August 19, 2026)cert-fr-avis · 2026-08-19
unknownexploitedMultiple vulnerabilities in IBM products (August 14, 2026)cert-fr-avis · 2026-08-14
low[UPDATE] [low] Apache log4j: Vulnerability allows information disclosurecert-bund · 2026-08-04
high[NEW] [high] SAP Patch Day July 2026cert-bund · 2026-07-29
unknownMultiple vulnerabilities in Oracle Weblogic (July 23, 2026)cert-fr-avis · 2026-07-23
unknownMultiple vulnerabilities in Oracle MySQL (July 23, 2026)cert-fr-avis · 2026-07-23
unknownNCSC-2026-0257 [1.00] [M/H] Vulnerabilities fixed in Oracle Enterprise Managerncsc-nl · 2026-07-22
high[NEW] [high] Oracle Supply Chain: Multiple vulnerabilitiescert-bund · 2026-07-22
high[NEW] [high] Oracle Enterprise Manager: Multiple vulnerabilitiescert-bund · 2026-07-22
high[NEW] [high] Oracle Commerce: Multiple vulnerabilitiescert-bund · 2026-07-22
unknownNCSC-2026-0230 [1.01] [M/H] Vulnerabilities fixed in SAP productsncsc-nl · 2026-07-17
unknownMultiple vulnerabilities in SAP products (July 15, 2026)cert-fr-avis · 2026-07-15
unknownNCSC-2026-0230 [1.00] [M/H] Vulnerabilities fixed in SAP productsncsc-nl · 2026-07-14
high[NEW] [high] IBM Operational Decision Manager: Multiple vulnerabilitiescert-bund · 2026-07-09
unknownMultiple vulnerabilities in IBM products (July 3, 2026)cert-fr-avis · 2026-07-03

External references

NVD record for CVE-2025-68161

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2025-68161 status](https://www.csirts.com/badge/CVE-2025-68161)](https://www.csirts.com/cve/CVE-2025-68161)