01 Record

CVE-2026-73633

Apache Struts: Unbounded read of a JSON request body

HighPUBLISHEDCNA: apache

Base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

02 Description

Apache Struts: Unbounded read of a JSON request body

Published: 2026-08-14 13:48Z4 HR AGO
Last updated: 2026-08-14 14:38Z4 HR AGO
Reserved: 2026-08-13
Assigning CNA: apache
Record state: PUBLISHED
Severity: High (CVSS 7.5)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-400
SSVC decision: ExploitationnoneAutomatableyesTechnical Impactpartial
Data version: 5.2
Document digest: cc0152bbabe77899fc19c32f2db18ff8cdd1e29de0f4471d991f93cfe696e431

VendorProductVersionsPlatforms

Apache Software FoundationApache Struts2.1.8 to 2.3.37, 2.5.0 to 2.5.33, 6.0.0 to 6.10.0, 7.0.0 to 7.2.1—