DeutschShown in its original language — a full translation is planned for a future version.
Apache Struts: Mehrere Schwachstellen
view advisory published 2026-08-13
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Struts ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren oder um einen Denial of Service zu verursachen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-73635US | — | — | ||
Allocation of resources without limits or throttling vulnerability in Apache Struts. When no fixed locale is configured, the locale used for localized-text lookups is taken from th… | ||||
| CVE-2026-73634US | — | — | ||
Uncontrolled resource consumption vulnerability in Apache Struts. An application that exposes an endpoint collecting Content Security Policy violation reports reads the submitted r… | ||||
| CVE-2026-73632US | — | — | ||
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing r… | ||||
| CVE-2026-73631US | — | — | ||
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data ass… | ||||
| CVE-2026-73633US | — | Exploit | ||
Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an application is configured to populate actions from a JSON request body, the plugin read… | ||||
02
references
External citations — patches, advisories, analysis.
- Apache Struts Security Bulletin vom 2026-08-13external
- Apache Struts Security Bulletin vom 2026-08-13external
- Apache Struts Security Bulletin vom 2026-08-13external
- Apache Struts Security Bulletin vom 2026-08-13external
- Apache Struts Security Bulletin vom 2026-08-13external
- WID-SEC-W-2026-2848 - CSAF Versionself
- WID-SEC-2026-2848 - Portal Versionself
- IBM Security Bulletin 7287319 vom 2026-09-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan