Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer can instantiate Proxy objects. Although deserialization is heavily restricted by HardenedObjectInputStream and no practical way to achieve remote code execution or significant privilege escalation has been identified, this issue constitutes a bypass of the intended security restrictions. This issue affects logback: through 1.5.33 inclusive.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core
    (HardenedObjectInputStream (logback-core) modules) allows Object Injection, albeit heavily restricted.
    More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or
    SimpleSSLSocketServer can instantiate Proxy objects. Although deserialization is heavily restricted by
    HardenedObjectInputStream and no practical way to achieve remote code execution or significant privilege
    escalation has been identified, this issue constitutes a bypass of the intended security restrictions.
    This issue affects logback: through 1.5.33 inclusive. (CVE-2026-10532)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core     (HardenedObjectInputStream (logback-core) modules) allows Object Injection, albeit heavily restricted.
    More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or     SimpleSSLSocketServer can instantiate Proxy objects. Although deserialization is heavily restricted by     HardenedObjectInputStream and no practical way to achieve remote code execution or significant privilege     escalation has been identified, this issue constitutes a bypass of the intended security restrictions.
    This issue affects logback: through 1.5.33 inclusive. (CVE-2026-10532)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
379426	SUSE SLED15: apache-commons-cli / aqute-bndlib / glassfish-annotation-api / etc (SUSE-SU-2026:5189-1)	Nessus	SuSE Local Security Checks	Local	high
459574	Echo: ch.qos.logback:logback-core: security update to 1.5.34	Tenable Cloud Security	Echo Local Security Checks	Local	medium
459574	Echo: ch.qos.logback:logback-core: security update to 1.5.34	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
444542	SCA: security update for ch.qos.logback:logback-core (GHSA-jhq6-gfmj-v8fx)	Tenable Cloud Security	SCA Checks	Local	medium
444542	SCA: security update for ch.qos.logback:logback-core (GHSA-jhq6-gfmj-v8fx)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
318267	Linux Distros Unpatched Vulnerability : CVE-2026-10532	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-10532

medium

Tenable Plugins

high

medium

medium

medium

medium

medium