Do Son Struts 7.4.0 fixes four Apache Struts vulnerabilities, including OGNL injection CVE-2026-104711 and a REST plugin DoS. Upgrade now.
Apache Struts
Apache Struts DoS flaws span CVE-2026-73633, CVE-2026-73634, and CVE-2026-73635, plus two JSON plugin bugs. Upgrade to 7.3.0.
Apache patched a Critical DoS flaw (CVE-2025-64775) in Struts. The bug causes a temporary file leak during multipart requests, allowing unauthenticated attackers to fill the disk and crash the server. Update now.
Hackers are actively exploiting a recently fixed flaw CVE-2024-53677 in the Apache Struts after a PoC exploit was made public
Urgent security update for Apache Struts users: Critical vulnerability (CVE-2024-53677) allows remote code execution. Update now to protect your systems.
a new evolution of the notorious Sysrv botnet exhibits sophisticated tactics, including the abuse of a Google subdomain to spread its payload
Apache Struts is facing a critical vulnerability (CVE-2023-50164) that can allow attackers to execute arbitrary code remotely.