https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T16:52:32.831122+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-06203 bdu:2022-06203 2026-10-27T16:52:32.834070+00:00 bdu:2022-06203 https://cve.radiocsirt.org/vuln/euvd-2026-110001 EUVD-2026-110001 2026-10-27T16:52:32.834106+00:00 EUVD-2026-110001 https://cve.radiocsirt.org/vuln/fkie_cve-2012-0838 fkie_cve-2012-0838 2026-10-27T16:52:32.834121+00:00

Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field.

 https://cve.radiocsirt.org/vuln/ghsa-mwrx-hx6x-3hhv GHSA-mwrx-hx6x-3hhv — Apache Struts Code injection due to conversion error 2026-10-27T16:52:32.834150+00:00

Affected: Maven: org.apache.struts:struts2-core, Maven: org.apache.struts.xwork:xwork-core

Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field.

 https://cve.radiocsirt.org/vuln/gsd-2012-0838 gsd-2012-0838 2026-10-27T16:52:32.834176+00:00 gsd-2012-0838 https://cve.radiocsirt.org/vuln/jvndb-2012-000012 jvndb-2012-000012 2026-10-27T16:52:32.834188+00:00

Apache Struts 2 contains an arbitrary Java method execution vulnerability. Apache Struts 2 is a framework to create Java web applications. Apache Struts 2 contains an arbitrary Java method execution vulnerability due to improper conversion in OGNL expression if a non-string property is contained in action. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.