CVE-2021-44228Vulnerability
Apache Log4j2 Remote Code Execution Vulnerability
Reported by 7 independent sources · first reported by Huntress · last reported
Last reported 4 days ago
Fix due 24 Dec 2021
Used by ransomware: knownCISA KEV catalogue
higher than 100% of CVEsFIRST EPSS, as of 26 Sep 2026
What the reports say
13 reports, newest first · the exact sentence from each-
There's only so much code: the rise in vulnerability numbers“Pre-Mythos threat actors exploited log4j (CVE-2021-44228) to immense success.”
-
Multiples vulnérabilités dans les produits IBM (16 octobre 2026)“Référence CVE CVE-2021-44228”
-
skynox7: Proxyjacking Edge Devices Into Residential Proxies“CVE-2021-44228”
-
September 2026 CVE Landscape“CVE-2021-44228”
-
Ten Years of Resilience, Innovation & Community-Driven Defense“When security researchers discovered CVE-2021-44228, better known as Log4Shell, they uncovered a zero-day vulnerability so severe that it earned a perfect 10.0 CVSS score.”
-
GreyNoise Detects Active Exploitation of Silk Typhoon-Linked CVEs“CVE-2021-26855, CVE-2021-44228 (Log4Shell), and CVE-2024-3400 are being actively targeted by threat actors.”
-
GreyNoise Detects Active Exploitation of CVEs Mentioned in Black Basta’s Leaked Chat Logs“CVE-2021-44228 – Apache Log4j RCE (Log4Shell)”
-
Analysis of Log4Shell vulnerability & CVE-2021-45046“In recent days Log4Shell, or CVE-2021-44228, has dominated the news cycle in the world of information security and beyond.”
-
Detecting Exploitation of CVE-2021-44228 (Log4j2) with Elastic Security“Detecting Exploitation of CVE-2021-44228 (Log4j2) with Elastic Security”
-
VMware Horizon Servers Actively Being Hit With Cobalt Strike“With that said, it’s entirely possible attackers exploited CVE-2021-44228 and CVE-2021-45046 to spread laterally within your network so you should proceed with caution.”
-
Mitigating Log4Shell in Log4j with Group-IB“MITRE has designated this vulnerability as CVE-2021-44228 and has given it the highest possible CVSS severity scroe of 10.0.”
-
Critical RCE Vulnerability Updates (log4j - CVE-2021-44228)“Critical RCE Vulnerability Updates (log4j - CVE-2021-44228)”
-
Critical RCE Vulnerability: log4j - CVE-2021-44228“Critical RCE Vulnerability: log4j - CVE-2021-44228”
Indicators reported together
named in the same reports- hxxps://logging.apache[.]org/log4j/2.x/in 2 reports
- maliciousexternalhost[.]comin 2 reports
- malicioushost[.]comin 2 reports
- hxxps://github[.]com/YfryTchsGD/Log4jAttackSurfacein 2 reports
- www.lunasec[.]ioin 2 reports
Copy these 5 indicators · defanged
Also named with it: CVE-2021-26855, CVE-2024-21762, CVE-2024-3400, CVE-2024-1709, CVE-2024-1708, CVE-2021-45046, CVE-2021-45105, CVE-2022-22965, CVE-2026-60004, CVE-2017-11882, CVE-2023-38831, CVE-2022-0847, CVE-2026-35273, CVE-2023-36884, CVE-2026-85046
Thanks — we review every report.