CVE-2016-3081
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled.
CISA Known Exploited Vulnerability
Vendor / Product
Apache — Struts
Date Added
2026-10-08
Remediation Due
2026-10-11
This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://cwiki.apache.org/confluence/display/WW/S2-032 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2016-3081
Weakness Classification (1)
Affected Software (66)
Showing 30 of 66 entries
References & Advisories (12)
US Government Resource
Third Party Advisory
VDB Entry
Third Party Advisory
VDB Entry
Third Party Advisory
VDB Entry
Third Party Advisory
Broken Link
Third Party Advisory
Third Party Advisory
Third Party Advisory
Patch
Vendor Advisory
Patch
Third Party Advisory
Exploit
Third Party Advisory
VDB Entry
Exploit
Third Party Advisory