Back Cybersecuritynews

Critical Apache Struts 2 Vulnerability Allow Attackers to Steal Sensitive Data

Cybersecuritynews •Abinaya • January 12, 2026

A critical XML external entity (XXE) injection vulnerability has been discovered in Apache Struts 2, potentially exposing millions of applications to data theft and server compromise. The vulnerability, tracked as CVE-2025-68493, affects multiple versions of the widely used framework and requires immediate action from developers and system administrators. Vulnerability Overview The security flaw exists in the […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Apache Struts 2 Vulnerability CVE-2025-68493 Exposes Sensitive Data A critical XML external entity (XXE) injection vulnerability, tracked as CVE-2025-68493, has been identified in Apache Struts 2. This flaw affects multiple versions of the framework, potentially exposing millions of applications to data theft and server compromise. Immediate action is required from developers and system administrators to mitigate the risks associated with this vulnerability. 7 sources 30

Extracted Entities

Critical Apache Struts 2 Vulnerability Allow Attackers to Steal Sensitive Data

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)