Forum Discussion

Josh_BP's avatar
Josh_BP
Regular Visitor
3 months ago
Solved

CVE-2026-34478

Not sure if this the right place, but trying to out a solution to CVE-2026-34478. This has to do with a log4j vulnerability. We have an On Prem gateway version 3000.318.11 and still see the 2.25.3 ve...
Need Help
  • andrewsommer's avatar
    andrewsommer
    3 months ago

    I think Microsoft has already patched in 3000.310 (March 2026 release). The latest is actually 3000.318 as of early June, so you're pretty far behind at this point.

    Don't delete the JAR files, that'll break things. The only real fix here is upgrading the gateway. It's an in-place upgrade so your existing connections should survive, just do it during a maintenance window to be safe.

andrewsommer's avatar
andrewsommer
Icon for Super User rankSuper User
3 months ago

I think Microsoft has already patched in 3000.310 (March 2026 release). The latest is actually 3000.318 as of early June, so you're pretty far behind at this point.

Don't delete the JAR files, that'll break things. The only real fix here is upgrading the gateway. It's an in-place upgrade so your existing connections should survive, just do it during a maintenance window to be safe.