{"metadata": {"vulnerability": "CVE-2016-3081", "count": 66, "kinds": {"milestone": 4, "sighting": 20, "kev": 11, "other": 31}}, "data": [{"timestamp": "2016-03-10T00:00:00Z", "date_only": false, "value": "2016-03-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2016-3081", "field": "cveMetadata.dateReserved"}, {"timestamp": "2016-04-19T00:00:00Z", "date_only": false, "value": "2016-04-19T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2016-3081", "field": "containers.cna.datePublic"}, {"timestamp": "2016-04-21T00:00:00Z", "date_only": true, "value": "2016-04-21", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2016-02506", "record": "CNVD-2016-02506", "field": "submitTime"}, {"timestamp": "2016-04-22T00:00:00Z", "date_only": false, "value": "2016-04-22T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201604-0434", "record": "VAR-201604-0434", "field": "sources_release_date.data.1.date"}, {"timestamp": "2016-04-25T00:00:00Z", "date_only": true, "value": "2016-04-25", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2016-02506", "record": "CNVD-2016-02506", "field": "openTime"}, {"timestamp": "2016-04-26T00:00:00Z", "date_only": false, "value": "2016-04-26T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201604-0434", "record": "VAR-201604-0434", "field": "sources_release_date.data.0.date"}, {"timestamp": "2016-04-26T14:00:00Z", "date_only": false, "value": "2016-04-26T14:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2016-3081", "field": "cveMetadata.datePublished"}, {"timestamp": "2016-04-26T14:59:00Z", "date_only": false, "value": "2016-04-26T14:59:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8C6J-FFMF-Q6VM", "record": "GHSA-8C6J-FFMF-Q6VM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2016-04-26T14:59:00Z", "date_only": false, "value": "2016-04-26T14:59Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2016-3081", "record": "GSD-2016-3081", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2016-04-26T14:59:02.207Z", "date_only": false, "value": "2016-04-26T14:59:02.207000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201604-0434", "record": "VAR-201604-0434", "field": "sources_release_date.data.4.date"}, {"timestamp": "2016-04-26T14:59:02.207Z", "date_only": false, "value": "2016-04-26T14:59:02.207", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2016-3081", "record": "FKIE_CVE-2016-3081", "field": "published"}, {"timestamp": "2016-04-28T00:00:00Z", "date_only": false, "value": "2016-04-28T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201604-0434", "record": "VAR-201604-0434", "field": "sources_release_date.data.3.date"}, {"timestamp": "2016-05-02T00:00:00Z", "date_only": false, "value": "2016-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/39756", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "12a250f2-9981-4fe7-9cdb-930846d93b2a", "url": "https://www.exploit-db.com/exploits/39756"}, {"timestamp": "2016-07-15T00:00:00Z", "date_only": false, "value": "2016-07-15T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201604-0434", "record": "VAR-201604-0434", "field": "sources_release_date.data.2.date"}, {"timestamp": "2016-10-26T01:16:00Z", "date_only": false, "value": "2016-10-26T01:16:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201604-0434", "record": "VAR-201604-0434", "field": "sources_update_date.data.1.date"}, {"timestamp": "2016-11-22T00:00:00Z", "date_only": false, "value": "2016-11-22T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201604-0434", "record": "VAR-201604-0434", "field": "sources_update_date.data.3.date"}, {"timestamp": "2018-05-29T15:50:33Z", "date_only": false, "value": "2018-05-29T15:50:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/struts_dmi_exec.rb", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "8cf624f3-8473-48f5-95af-fc727f7f83be", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/struts_dmi_exec.rb"}, {"timestamp": "2018-10-15T09:00:00Z", "date_only": false, "value": "2018-10-15T09:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201604-0434", "record": "VAR-201604-0434", "field": "sources_update_date.data.2.date"}, {"timestamp": "2019-08-12T00:00:00Z", "date_only": false, "value": "2019-08-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201604-0434", "record": "VAR-201604-0434", "field": "sources_update_date.data.0.date"}, {"timestamp": "2019-08-12T20:45:53Z", "date_only": false, "value": "2019-08-12T20:45:53.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2016-3081", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2019-08-12T21:15:00Z", "date_only": false, "value": "2019-08-12T21:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2016-3081", "record": "GSD-2016-3081", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2019-08-12T21:15:13.157Z", "date_only": false, "value": "2019-08-12T21:15:13.157000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201604-0434", "record": "VAR-201604-0434", "field": "sources_update_date.data.4.date"}, {"timestamp": "2019-08-15T00:00:00Z", "date_only": false, "value": "2019-08-15T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201604-0434", "record": "VAR-201604-0434", "field": "sources_update_date.data.5.date"}, {"timestamp": "2022-05-14T00:00:00Z", "date_only": true, "value": "2022-05-14", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2016-3081", "record": "GSD-2016-3081", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-05-14T00:54:14Z", "date_only": false, "value": "2022-05-14T00:54:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8C6J-FFMF-Q6VM", "record": "GHSA-8C6J-FFMF-Q6VM", "field": "published"}, {"timestamp": "2023-07-28T00:00:00Z", "date_only": true, "value": "2023-07-28", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2016-3081", "record": "GSD-2016-3081", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-11-01T19:47:28Z", "date_only": false, "value": "2023-11-01T19:47:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8C6J-FFMF-Q6VM", "record": "GHSA-8C6J-FFMF-Q6VM", "field": "modified"}, {"timestamp": "2023-12-13T01:21:28.009Z", "date_only": false, "value": "2023-12-13T01:21:28.009845Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2016-3081", "record": "GSD-2016-3081", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T11:13:12.119Z", "date_only": false, "value": "2023-12-18T11:13:12.119000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-201604-0434", "record": "VAR-201604-0434", "field": "last_update_date"}, {"timestamp": "2024-08-05T23:40:15.633Z", "date_only": false, "value": "2024-08-05T23:40:15.633Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2016-3081", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:42Z", "date_only": false, "value": "2025-02-06T03:13:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "10473b9c-034f-491a-9741-38b83f6527ed"}, {"timestamp": "2025-02-23T04:09:46Z", "date_only": false, "value": "2025-02-23T04:09:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "d30cf6af-d887-403f-96c2-54c249891400"}, {"timestamp": "2026-07-23T09:37:25Z", "date_only": false, "value": "2026-07-23T09:37:25+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2016-3081", "field": "timestamps.asserted_at", "uuid": "0c739051-a426-4ad6-8fb8-5fe405382039", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-23T09:37:25Z", "date_only": false, "value": "2026-07-23T09:37:25+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2016-3081", "field": "timestamps.first_seen_at", "uuid": "0c739051-a426-4ad6-8fb8-5fe405382039", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-23T09:37:25Z", "date_only": false, "value": "2026-07-23T09:37:25+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2016-3081", "field": "status.status_updated_at", "uuid": "0c739051-a426-4ad6-8fb8-5fe405382039", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-23T09:37:25.728Z", "date_only": false, "value": "2026-07-23T09:37:25.728Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2016-3081", "field": "evidence.0.details.added_date", "uuid": "0c739051-a426-4ad6-8fb8-5fe405382039", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-23T10:00:01Z", "date_only": false, "value": "2026-07-23T10:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2016-3081", "field": "timestamps.recorded_at", "uuid": "0c739051-a426-4ad6-8fb8-5fe405382039", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-23T10:00:38.297Z", "date_only": false, "value": "2026-07-23T10:00:38.297538Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0c739051-a426-4ad6-8fb8-5fe405382039", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "87b18bfa-5cad-4ea0-9561-bbe7cd9f042c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0c739051-a426-4ad6-8fb8-5fe405382039"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2016-3081", "field": "timestamps.asserted_at", "uuid": "edf21c97-a753-4f28-a192-7abef3ae5161", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": true, "value": "2026-10-08", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2016-3081", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": true, "value": "2026-10-08", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2016-3081", "field": "evidence.0.details.date_added", "uuid": "edf21c97-a753-4f28-a192-7abef3ae5161", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2016-3081", "field": "timestamps.first_seen_at", "uuid": "edf21c97-a753-4f28-a192-7abef3ae5161", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2016-3081", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2016-3081", "record": "FKIE_CVE-2016-3081", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2016-3081", "field": "status.status_updated_at", "uuid": "edf21c97-a753-4f28-a192-7abef3ae5161", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2016-3081", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2026-10-08T18:00:01Z", "date_only": false, "value": "2026-10-08T18:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2016-3081", "field": "timestamps.recorded_at", "uuid": "edf21c97-a753-4f28-a192-7abef3ae5161", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T18:00:02.486Z", "date_only": false, "value": "2026-10-08T18:00:02.486316Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/edf21c97-a753-4f28-a192-7abef3ae5161", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "cc2ca5a2-44d6-4d08-a87e-613f052e0b8b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/edf21c97-a753-4f28-a192-7abef3ae5161"}, {"timestamp": "2026-10-08T18:00:30.489Z", "date_only": false, "value": "2026-10-08T18:00:30.489260Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mxf22xba4r2x", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "03dc972e-a82d-4da9-9a8b-b7a23b9dc3e3", "content": "\ud83d\uded1 CVE-2016-3081\nApache Struts\nCVSS 8.1 / EPSS 93% / KEV: No\nTL;DR: Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Metho\u2026\nhttps://cvesentinel.com/report/CVE-2016-3081?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mxf22xba4r2x"}, {"timestamp": "2026-10-08T18:20:04.005Z", "date_only": false, "value": "2026-10-08T18:20:04.005214Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mxf35w7smq2w", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "e9243e4b-fbe0-42b1-b947-64a3d5f4af21", "content": "CISA added CVE-2016-3081 to its Known Exploited Vulnerabilities list (2026-10-08).\nApache Struts Command Injection\nEPSS 30 days before listing: 0.934 \u00b7 today: 0.934\n#infosec #KEV", "url": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mxf35w7smq2w"}, {"timestamp": "2026-10-08T19:15:35.440Z", "date_only": false, "value": "2026-10-08T19:15:35.440610Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mxf6b7s43i22", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "495d4222-d03c-4078-8797-ed49c19975f9", "content": "\ud83d\udea8 NEW on CISA KEV \u2014 exploited in the wild\nApache Struts: Apache Struts Command Injection Vulnerability\nCVE-2016-3081 \u00b7 patch by 2026-10-11\n\ud83d\udd17 https://ninjasignal.ninja/intel/cve/CVE-2016-3081\n#KEV #cybersecurity #infosec", "url": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mxf6b7s43i22"}, {"timestamp": "2026-10-08T20:05:51.095Z", "date_only": false, "value": "2026-10-08T20:05:51.095946Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/secdb/statuses/117406827249675241", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "bf74510e-45f1-4026-9cc4-af6267ca29ed", "content": "\ud83d\udea8 [CISA-2026:1008] CISA Adds 5 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1008)\nCISA has added 5 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.\n\u26a0\ufe0f CVE-2015-3306 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-3306)- Name: ProFTPD Improper Access Control Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: ProFTPD- Product: ProFTPD- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: http://www.proftpd.org/ ; https://lists.debian.org/debian-security-announce/2015/msg00154.html ; https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-3306\n\u26a0\ufe0f CVE-2015-5477 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-5477)- Name:  ISC BIND Data Processing Errors Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: ISC- Product: BIND- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272 ; https://access.redhat.com/errata/RHSA-2015:1513.html; https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5477\n\u26a0\ufe0f CVE-2016-3081 (https://secdb.nttzen.cloud/cve/detail/CVE-2016-3081)- Name: Apache Struts Command Injection Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Apache- Product: Struts- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://cwiki.apache.org/confluence/display/WW/S2-032 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2016-3081\n\u26a0\ufe0f CVE-2021-3199 (https://secdb.nttzen.cloud/cve/detail/CVE-2021-3199)- Name: ONLYOFFICE Docs Server Path Traversal Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: ONLYOFFICE- Product: Docs- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2021-3199\n\u26a0\ufe0f CVE-2023-22894 (https://secdb.nttzen.cloud/cve/detail/CVE-2023-22894)- Name: Strapi Cleartext Storage of Sensitive Information Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Strapi- Product: Strapi- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve ; https://github.com/strapi/strapi/releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-22894\n#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261008 #cisa20261008 #cve_2015_3306 #cve_2015_5477 #cve_2016_3081 #cve_2021_3199 #cve_2023_22894 #cve20153306 #cve20155477 #cve20163081 #cve20213199 #cve202322894", "url": "https://infosec.exchange/users/secdb/statuses/117406827249675241"}, {"timestamp": "2026-10-09T03:55:30.407Z", "date_only": false, "value": "2026-10-09T03:55:30.407Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2016-3081", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-09T03:55:30.407Z", "date_only": false, "value": "2026-10-09T03:55:30.407Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2016-3081", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-09T06:31:08.376Z", "date_only": false, "value": "2026-10-09T06:31:08.376525Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mxgdz75zyb22", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "e877f2b0-44f1-4cc9-ad64-a082a8dddc56", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2016-3081: \u26a0\ufe0f CVE-2016-3081: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 93.4%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2016-3081-apache-struts-2319-to-23202-2321", "url": "https://bsky.app/profile/threatspotai.bsky.social/post/3mxgdz75zyb22"}, {"timestamp": "2026-10-09T07:29:18.101Z", "date_only": false, "value": "2026-10-09T07:29:18.101765Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxghb6xttr2g", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "52db0b73-0fec-4a69-b729-2add5991530d", "content": "\ud83d\udd34 Exploitation confirm\u00e9e (CISA KEV, ajouts du 08/10) \u00b7 5\n\u2022 ProFTPD CVE-2015-3306, CVSS 10.0\n\u2022 ISC BIND CVE-2015-5477, CVSS 7.5\n\u2022 Apache Struts CVE-2016-3081, CVSS 8.1\n\u2022 ONLYOFFICE Docs CVE-2021-3199, CVSS 9.8\n\u2022 Strapi CVE-2023-22894, CVSS 4.9", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mxghb6xttr2g"}, {"timestamp": "2026-10-09T09:06:51.821Z", "date_only": false, "value": "2026-10-09T09:06:51.821436Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/csirts.com/post/3mxgmpnlsm327", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "01880df1-0794-4adf-949d-48b59e7eb9e6", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2016-3081: Apache Struts Command Injection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2016-3081", "url": "https://bsky.app/profile/csirts.com/post/3mxgmpnlsm327"}, {"timestamp": "2026-10-09T14:43:05.703Z", "date_only": false, "value": "2026-10-09T14:43:05.703", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2016-3081", "record": "FKIE_CVE-2016-3081", "field": "lastModified"}, {"timestamp": "2026-10-10T12:47:36.250Z", "date_only": false, "value": "2026-10-10T12:47:36.250125Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mxjjjacqsh2l", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "53ac1173-061f-48c7-a1b1-ff143c2961cc", "content": "(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2016-3081 \u2013 Apache Struts Command Injection\u00a0Vulnerability\n\nUnpack CVE-2016-3081 with our technical TSUITE brief. Get advanced detection rules, Splunk SPL, KQL, and forensic triage priorities for active CISA KEV threats....\n\nhttps://thecybermind.co/bw95", "url": "https://bsky.app/profile/thecybermind.co/post/3mxjjjacqsh2l"}, {"timestamp": "2026-10-10T12:49:15.411Z", "date_only": false, "value": "2026-10-10T12:49:15.411102Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mxjjm7c6iu27", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "c1a60246-47ed-4b0b-bffe-7f08051a26f0", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2016-3081 \u2013 Apache Struts Command Injection\u00a0Vulnerability\n\nA strategic C-Suite threat brief covering CVE-2016-3081 Apache Struts command injection vulnerability, featuring active mitigation, asset inventory management, and\u2026\n\nhttps://thecybermind.co/2p4b", "url": "https://bsky.app/profile/thecybermind.co/post/3mxjjm7c6iu27"}, {"timestamp": "2026-10-11T00:00:00Z", "date_only": true, "value": "2026-10-11", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2016-3081", "field": "evidence.0.details.due_date", "uuid": "edf21c97-a753-4f28-a192-7abef3ae5161", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T07:53:06.060Z", "date_only": false, "value": "2026-10-12T07:53:06.060415Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacks.gr/post/3mxnzyijbo7iw", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "9be75dd8-62b6-4811-a71e-49b78cfa58d6", "content": "CISA added the Apache Struts command injection vulnerability CVE-2016-3081 to its known exploited catalog, requiring U.S. federal agencies to patch or miti\u2026\n\nhttps://en.hacks.gr/palio-provlima-sto-apache-struts-axiopoieitai-energa-se-epitheseis-symfona-me-ti-cisa/\n\n#ApacheStruts #CISA #Vulnerability", "url": "https://bsky.app/profile/hacks.gr/post/3mxnzyijbo7iw"}, {"timestamp": "2026-10-12T08:15:51.309Z", "date_only": false, "value": "2026-10-12T08:15:51.309643Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxo3b6u23x2w", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "f949d317-53f8-45e1-b0d5-74ec51d12fef", "content": "CISA\u300110\u5e74\u524d\u306eApache Struts RCE\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u653b\u6483\u306e\u767a\u751f\u3092\u8b66\u544a\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u300110\u5e74\u524d\u306b\u516c\u958b\u3055\u308c\u305fApache Structs\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u300cCVE-2016-3081\u300d\u306b\u3064\u3044\u3066\u3001\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u8a3c\u62e0\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3068\u3057\u3066\u3001\u300c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u300d\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u52d5\u7684\u30e1\u30bd", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxo3b6u23x2w"}, {"timestamp": "2026-10-12T11:31:18.356Z", "date_only": false, "value": "2026-10-12T11:31:18.356483Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mxog6ob4tv2q", "record": "cve-2016-3081", "field": "creation_timestamp", "uuid": "409ca077-dab8-4d01-9080-db4f63737a6c", "content": "Old Apache Struts flaw CVE-2016-3081 is being actively exploited\u2014patch now. #ApacheStruts #CVE20163081 #Vulnerability #CyberSecurity #ThreatIntel #LegacySystems https://thedailytechfeed.com/outdated-apache-struts-bug-cve-2016-3081-under-active-attack/", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mxog6ob4tv2q"}, {"timestamp": "2026-10-12T12:35:19.848Z", "date_only": false, "value": "2026-10-12T12:35:19.848287Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/160355e6-36c4-42a6-a839-70a2c2c3a87e", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "32c3b926-3b18-4d9e-bae1-2a1cdf93534c", "url": "https://vulnerability.circl.lu/bundle/160355e6-36c4-42a6-a839-70a2c2c3a87e"}, {"timestamp": "2026-10-12T14:11:04.207Z", "date_only": false, "value": "2026-10-12T14:11:04.207890Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxop4dv3gpsu", "record": "CVE-2016-3081", "field": "creation_timestamp", "uuid": "cece4124-e1a1-4a73-b895-2430e06264f8", "content": "CISA KEV | CVE-2016-3081 | Apache / Struts\n\nCISA lists this vulnerability as exploited in the wild. Check affected products and vendor guidance.\n\nSource: CISA KEV\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1235", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxop4dv3gpsu"}]}