{
  "cveId": "CVE-2026-49844",
  "url": "https://patchblox.com/security/cve/CVE-2026-49844",
  "summary": "CVE-2026-49844 is fixed in 3 products on 1 platform, first by ALAS2023-2026-2072, released August 31, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "log4j: Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produc...",
  "description": "Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue affects Apache Log4j API versions 2.13.1 through 2.25.4 and version 2.26.0.",
  "published": "2026-08-31T09:00:00Z",
  "severity": "moderate",
  "epss": 0.00595,
  "epssPercentile": 0.48897,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "log4j",
      "release": "amzn 2023",
      "fixedVersion": "2.17.2-1.amzn2023.0.6",
      "fix": "ALAS2023-2026-2072",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2072",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "log4j-jcl",
      "release": "amzn 2023",
      "fixedVersion": "2.17.2-1.amzn2023.0.6",
      "fix": "ALAS2023-2026-2072",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2072",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "log4j-slf4j",
      "release": "amzn 2023",
      "fixedVersion": "2.17.2-1.amzn2023.0.6",
      "fix": "ALAS2023-2026-2072",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2072",
      "released": "2026-08-31T09:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}