CWE-778 vulnerabilities

Progress MarkLogic Server versions 11.0.0 through before 11.3.7 and 12.0.0 through before 12.1.0 have a vulnerability where successful authentication events are not consistently logged in audit logs. This insufficient logging could hinder detection and investigation of unauthorized access or credential misuse.

Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and reported nothing. A party whose data reaches a log message could suppress the whole record by making it long enough. Only applications on Windows that use EventLogAppender are affected. This issue affects Apache log4net: from 1.2.9 before 3.5.0. Users are recommended to upgrade to version 3.5.0, which fixes the issue.

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.

CVE-2026-66816 is a vulnerability in Microsoft SQL Server 2022 (CU 26) involving insufficient logging. This flaw allows an authorized attacker to bypass a security feature over a network. The vulnerability has a medium severity rating with a CVSS score of 6.5. An official fix is available from Microsoft.

CVE-2025-62307 is a medium severity vulnerability in HCL IntelliOps Event Management (IEM) version 1.4.0 caused by insufficient logging. This weakness reduces the ability to detect attacks and weakens accountability by obscuring privilege probing activities. The vulnerability does not allow direct compromise of confidentiality or availability but impacts integrity and detection capabilities.

CVE-2026-41709 is a low-severity vulnerability in VMware Cloud Foundation involving insufficient logging. A malicious administrator could perform certain operations without those actions being recorded in logs. This issue affects multiple versions of VMware Cloud Foundation, including 5.x, 9.0.x.x, and 9.1.x.x. No official patch or remediation guidance has been published yet, and there are no known exploits in the wild.

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted `approve-recovery` API request.

Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering the unseal notification to administrators via a crafted export request. This issue affects : * Devolutions Server 2026.1.6.0 through 2026.1.16.0 * Devolutions Server 2025.3.20.0 and earlier

Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1 contains an Insufficient Logging vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

In Juju from version 3.0.0 through 3.6.18, the authorization of the "secret-set" tool is not performed correctly, which allows a grantee to update the secret content, and can lead to reading or updating other secrets. When the "secret-set" tool logs an error in an exploitation attempt, the secret is still updated contrary to expectations, and the new value is visible to both the owner and the grantee.

CVE-2026-3494 is a medium severity vulnerability in MariaDB Server versions up to 11.8.5 where the server audit plugin fails to log SQL statements that begin with comment prefixes (double-hyphen or hash) when certain audit event filters are enabled. This results in insufficient logging of some database queries.

CVE-2026-25598 is a medium-severity vulnerability in the step-security Harden-Runner GitHub Action prior to version 2.14.2. It allows outbound network connections made via certain socket system calls (sendto, sendmsg, sendmmsg) to evade audit logging when egress-policy is set to audit. This insufficient logging weakness (CWE-778) can undermine the visibility of potentially malicious outbound traffic in CI/CD environments using Harden-Runner. The vulnerability does not require authentication or user interaction and has a CVSS score of 6.3. It is fixed in version 2.14.2.

Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information tampering.

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the admin_audit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed in Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1.

Insufficient Logging vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Data Leakage Attacks.This issue affects Mediawiki - AbuseFilter Extension: from 1.43.X before 1.43.2.