Apache Struts 2: RestfulActionMapper OGNL Injection Unauthenticated Root RCE
Author: 0day Rubbish Research Team (advisory produced by an automated multi-LLM ensemble — the project credits Claude, OpenAI, DeepSeek, and GLM) Published: 2026-08-02 Source: https://0day-rubbish.com/blog/apache-struts2-restful-mapper-ognl-rce Summary An advisory from the 0day Rubbish project reports an unauthenticated remote code execution chain in Apache Struts 2 6.11.0 (and earlier 6.x releases that have not enabled the new … Read more