{"data":{"cve":"CVE-2021-44228","in_kev":true,"vendor":"Apache","product":"Log4j2","name":"Apache Log4j2 Remote Code Execution Vulnerability","date_added":"2021-12-10","due_date":"2021-12-24","required_action":"For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.","known_ransomware":true,"notes_urls":["https://nvd.nist.gov/vuln/detail/CVE-2021-44228"],"catalog_version":"2026.10.08"},"meta":{"dataset":"kev","snapshot_id":"kev-20261009T183031Z-bc476d6c","as_of":"2026-10-09T18:30:31Z","retrieved_at":"2026-10-12T07:48:47.000Z","source":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","licence":"CC0-1.0","attribution":"Source: CISA Known Exploited Vulnerabilities Catalog (CC0 1.0). Not endorsed by CISA or DHS.","sha256":"bc476d6c11a365d2f4371f6775a025d2d0e3d74bed5bca521838007452b956b0","signature":"7myQFEflDakqF7g_i3K2rJVEaTHUISDTdqk1GTx5eaKfez3Vl441AmI2waBitfy0YBzE2yGUUFaRTJtVVki8BQ","key_id":"sf-2026-10","manifest_url":"/v1/kev/manifest","stale":false,"notice":"Normalised (modified) from the source. Provided as is, without warranty. Not endorsed by the source."}}