suspectedlowVulnerabilityFirst reported Oct 12, 2026

Apache Struts: CISA confirms CVE-2016-3081 command injection exploited in attacks

CISA added Apache Struts flaw CVE-2016-3081 to its Known Exploited Vulnerabilities catalog after confirming real-world exploitation. The command injection flaw allows remote code execution on vulnerable servers when Dynamic Method Invocation is enabled.

Members only

The full record: the timeline and 1 linked report

Every update as it happened, with the status at each step
Every report behind the record, newest first
Alerts the moment Apache Struts — or anything else you track — is hit again

A free account is all it takes — no card, one minute.

Create a free account Log in