Severity: High, Medium

Description: SAS Deployment Agent contains versions of LOGBACK and LOG4J jars with the following known vulnerabilities:

• CVE-2026-49844
• CVE-2026-34480
• CVE-2026-34479
• CVE-2026-34477
• CVE-2026-13006
• CVE-2026-9828
• CVE-2026-1225
• CVE-2025-68161
• CVE-2025-11226
• CVE-2024-12801
• CVE-2024-12798
• CVE-2023-6378

Potential Impact: See the CVE records for additional information.