Unverified50% confidenceOpinionExact time
From Log4Shell to Node2Shell, attackers continue to look for common defects in underlying general-purpose components.
1
Sources
50%
Confidence
Long-term
Relevance
10/24/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe Heartbleed vulnerability in OpenSSL and the Log4Shell vulnerability in Log4j exposed systemic issues of insufficient maintenance resources for critical open-source projects.67% similarVerifiedCVE-2021-44228 is the well-known Log4Shell vulnerability66% similarUnverifiedThe Log4Shell vulnerability originated in a logging library maintained by volunteers and affected billions of devices worldwide.65% similarUnverifiedThe Log4j vulnerability (CVE-2021-44228) allows attackers to trigger a JNDI lookup via a crafted string to achieve unauthenticated remote code execution.62% similarUnverifiedLog4Shell漏洞（CVE-2021-44228）被安全研究人员评为CVSS满分10.0，利用门槛极低，仅需在日志中注入一段JNDI查询字符串62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1094277API
curl https://kongchang.com/api/v1/knowledge/claims/1094277MCP
get_claim(id=1094277)