Known Exploited Vulnerabilities November 03, 2021 · CISA KEV Catalog

CVE-2018-11776: Apache Struts Remote Code Execution Vulnerability

Apache Struts contains a vulnerability that allows for remote code execution under two circumstances. One, where the alwaysSelectFullNamespace option is true and the value isn't set for a result defined in underlying configurations and in same time, its upper package configuration have no or wildcard namespace. Or, using URL tag which doesn't have value and action set and in same time, its upper package configuration have no or wildcard namespace.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Apache CVE-2018-11776
Related: CVE-2016-3081: Apache Struts Command Injection Vulnerability Known Exploited Vulnerabilities · Oct 08, 2026
CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Known Exploited Vulnerabilities · Aug 04, 2026
CVE-2026-34197: Apache ActiveMQ Improper Input Validation Vulnerability Known Exploited Vulnerabilities · Apr 16, 2026