CVE-2016-3081

Vendor

Apache

Product

Struts

EPSS

0.97 (p100)

CISA KEV

added 8 Oct 2026, due 11 Oct 2026 (21d overdue)

Weakness

CWE-77

Exposure class

Web platform, Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 71
   KEV CISA KEV 24d ago

   Apache Struts Command Injection Vulnerability

   Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled.

   KEV · due 11 Oct 2026 (overdue) EPSS 0.97 Fix available CVE-2016-3081 Apache
2. 28
   CISA advisory CISA 23d ago

   Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data

   Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber…

   CVE-2014-6278CVE-2015-3306CVE-2015-5477+5 more Microsoft Google