{"revision":"8be44a319ddb425fbe5d6564ed76d01f","evidence":{"cve":"CVE-2016-3081","kev":{"cve":"CVE-2016-3081","product":"Struts","name":"Apache Struts Command Injection Vulnerability","dateAdded":"2026-10-08","dueDate":"2026-10-11","knownRansomwareUse":false,"shortDescription":"Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled.","vendor":"Apache","isMicrosoft":false,"products":[],"advisoryUrl":"https://cwiki.apache.org/confluence/display/WW/S2-032","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3081","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3081"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"5e8257242585d3a6cb66c2b7"}}