A severe vulnerability in Apache Log4j2 earns a maximum 10.0 severity score and enables attackers to run arbitrary code remotely. Developers must update affected systems immediately to prevent exploitation.