CVE-2025-68493

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

January 12, 2026

Last Seen

January 12, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Apache Struts 2 Vulnerability CVE-2025-68493 Exposes Sensitive Data30.1

A critical XML external entity (XXE) injection vulnerability, tracked as CVE-2025-68493, has been identified in Apache Struts 2. This flaw affects multiple versions of the framework, potentially exposing millions of applications to data theft and server compromise. Immediate action is required from...