Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 4h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 7h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 7h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 8h Vulnerabilitas in software Sparx Systems Enterprise Architect · 8h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 8h Vulnerabilitates in Slican telephonis · 9h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 12h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 13h Langflow's Critica Authenticated RCE Vulnerabilitas Targetata in 1,423 Honeypot Exploit Conatibus · 13h Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 4h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 7h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 7h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 8h Vulnerabilitas in software Sparx Systems Enterprise Architect · 8h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 8h Vulnerabilitates in Slican telephonis · 9h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 12h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 13h Langflow's Critica Authenticated RCE Vulnerabilitas Targetata in 1,423 Honeypot Exploit Conatibus · 13h

ACyber Sentinel Turma Aestimationis Securitatis

← Redire

⚠️ Renuntiatio Vulnerabilitatis

CVE-2026-104711

CRITICAL CVSS 9.8 CVSS 3.1 📌 Analyzed

CVE-2026-104711 - Apache Struts: OGNL injection in the legacy RESTful action mapper

Improper neutralization of special elements used in an expression language statement ('Expression Language Injection') vulnerability in Apache Struts. If the application is configured to use the legacy RESTful action mapper, a crafted request can inject an OGNL expression that may lead to remote code execution. Struts 7 is affected only when the OGNL allowlist is disabled; it is enabled by default. Applications using the default action mapper, the restful2 mapper, or the Struts REST plugin are not affected.

This issue affects Apache Struts: from 2.0.0 through 2.3.37, from 2.5.0 through 2.5.33, from 6.0.0 through 6.11.0, from 7.0.0 through 7.3.0.

Users are recommended to upgrade to version 6.12.0 or 7.4.0, which fixes the issue.

Publicatum: Oct 05, 2026 19:17

Ultima Mutatio: Oct 08, 2026 19:05